Added validation to the login window
Added the ability to list sessions by user.  Also added the ability to grab the access token from the header if present
Update /api/sessions/list to filter out invisible entries is no auth token is provided