Add security to loginWithId + 10 days session
Fix loginWithToken