Remove User, SharedFolder, and UserSession from models and API

Summary: spring cleaning

Test Plan: all tests pass

Reviewers: spang

Differential Revision: https://review.inboxapp.com/D144