Nil out session token when logging out to prevent broken resuming
Change default user parameters to use username not email