Some changes to session management
Add check for no user with given auth_token