API server now verifies existing session token instead of Auth server.
Parameters had no default value, which caused warnings. Corrected.
Added regex for extra security.
Merge pull request #17 from wlox/optimize-sessions

Optimize sessions