Anonymous user sessions

Initial implementation of session tokens.

Modified notifications to allow token-based notifications in addition to user-based notifications.  Added an anonymous session scope.

Added swagger documentation for notification/stream.

Increased tests for a few other cases.

Addresses issue #511.