implement session injector to add session token to each request, sign out currentUser if token is no longer valid on app start