include the base model class
session::verifyToken() added. makes sure a token is valid