Studies: Adding/removing Stormpath directories, adding a service to coordinate

Maybe setSessionToken could happen in the exception interceptor, so any 412 exception sets the cookie and header.