feat(server_session): move to sqlalchemy
fix(testserver): remove the list of used tokens from the testserver