Changed behavior of Session::destroy() to destroy only one session per default, therefore modified SignOut.
Changed unauthorized exception to destroy no session per default.
Changed token validation to destroy session if the user ids don't match.
Merge branch 'master' of https://github.com/MovLib/www