Add SessionsModel#getByAuthToken and sessionChecker middleware