turn up max_retries default to 3 and make it configurable
don't send sessionToken in body of user when saving since it's invalid
Merge pull request #22 from ericcj/master

saving User object fails because of sessionKey