Function create_session 

pub async fn create_session(pool: &DbPool) -> Result<NewSession, AuthError>

Create a new session in the database.

Returns the raw token (to set in the cookie) and the CSRF token.