removed User->authToken and added documentation
updated database structure: dropped field auth_token from table users
added UserSession class