changed model: now a session has an object id due to the fact that we need to update the hash field (which was the _id before), user.name is now optional (can be inferred by the resource in most cases), added login service to acquire fresh hashes, fixes in the App.scala for the user service, adjusting tests for the new model