GPII-290: Implemented the required functionality to request a usertoken along with tests


NOTE: that I have added an include of io.json config in the flowmanager config for development environment to ensure that sessions are enabled