* now returning authentication_token on Sessions#create