Added ability to reset API token
Cleaned up session flash handling