Mapper and Session changes

Session uses Account not UserAccount, Mapper added for createboard,
Securtiy can check the token's lifetime.