Renamed TokenAuthenticator to SessionAuthenticator
Completed PasswordResetTokenAuthenticatorSpec
Always gets token from request entity
Minor field name fix