SJ [finishes #76648774] - login/signup endpoints return session tokens, the tokens are used in secure endpoints