fixed user-disconnected error that caused server to crash. Introduced a
session token that is generated by the server and passed to the client.
Token protects against the refresh-error as well