578 return temporary session token in user endpoint

closes #578 and #579
@pld this will actually return the status code `400` with the message

```json
{"detail": "Temporary token not found!"}
```
Raising the exception at this point is valid in `rest_framework` land.