Allow session lookup via token.
Created by: NotSpecial
For most OAuth usecases, accessing tools will have the token and might need to verify whether the session still exists.
This change is intended to make the process even simpler, by allowing requests of the form GET /sessions/<token>
.