Add session token to User
Write full user model
Fix is_password? helper method