Added session security

Creates a new session when logging in (prevents session fixation)

Only allows 1 session per authenticated user (doesn’t allow
simultaneous usage with the same user account)