InvalidateToken should reset user cookie

Conflicts:
	src/base/jee/JeeBase.java
	src/base/security/command/InvalidateToken.java
ApiServlet should mae user IP available in User object
Authenticate command log IP correctly