Add a session/jwt token column to credentials

[cadomani]

Used to validate current session instead of relying on passport memory, which is leaky