Changes made by Kelvin Kosbab (kelvin@kosbab.com). For requests, send only session remember token and not entire user object.