Login method now creates a new session token and stores it in the DB for the user.