rearranging ParseUser, added validateSessionToken