Sign in the user, generate token, send session response

Fix #289