Refactor API routes.
Expire login sessions every day.

30 mins is super annoying, you have to keep on logging back in all the time.
Removed `ensure_account` in favor of a simple redirect.