Updates BaseController.prepare for session check flow
Updates User model to make token a User attribute