Fix #7: Fix the pruning query.

session.module is supposed to prune expired auth tokens
on every login request. The pruning query had the incorrect
SQL syntax "DELETE COUNT(*) FROM" which mysql does not accept.