Fix always returning 404 on refreshing tokens

	modified:   .htaccess
	modified:   User.php
	modified:   api/sessions/put.php