Ensure sessions get saved properly, get tokens from login
Add TokensSpec tests
Merging Andrew's Auth Service changes