Reworked sessions, created Token model to handle regular logins and logins with post verification