added api, failing
changes
registration done
logout and login
require auth token implemented as beta
signed in user after checked for auth token
Removed null_session from protect_from_forgery so api works