Fixing environment variables. Not sure why i thought they were a symbol
Adjusting how users are found after finding out the token changes after each time a user logs in. Keying off the xid is much more suited for this kind of query.
Wired up sessions to handle login and redirection for visting pages that you have not be logged in yet to see.
Adding logout action and updating tests for redirects on logging in and logging out.