Add user session retrieval to API Authenticate()
Fill out login API, capture user sessions, fix key generation