Some improvements and bug fixes in user authentication:
- Allow multiple sessions per user
- Removed token/sessionId duality (only sessionId is left)
- Enforce sessionId as unique, no two users can have the same session id
- Improved UI reload/restore behaviour
- PingCommand sends a response now, and response includes username