[Session] Nullify `verification_token` once verified.

Fixes #28.