Added unit tests.
Improved code.
Changed app_user table.
Now the app users web services returns an unique access token.