Implemented session resource tokens so passwords don't have to passed to client.