session token stored in mongodb (add reactivemongo dependency)