Remove token from api automatically
Add message system + redirect w/ message
Remove cookie based functions + store user data in shm = server side non-db user checking = speed