Added login mechanism with session values
Fixed login and logout sessions, it now removes token from db
added logout to destroy session data and remove token from db