Added sessions and cookies.
Ignore token.txt (debugging purposes). Add session validation and removal.