Implemented sessions using an API token to authorize logins