Server Auth: Save session logged in state + Tests

We won't be able to respond to the client with 400 if there is a bad phone number sent or some other failure if we do this