add token type column and delete only temporary tokens in the background job debounce token updates; fix wrong class import
* Add InvalidTokenException * add DefaultTokenMapper and use it to check if a auth token exists * create new token for the browser session if none exists hash stored token; save user agent * encrypt login password when creating the token
