Summary

Closes #1270

Currently on the mobile app if you log into one account, then log out and into a different account, you will still receive push notifications for the first account.

This is because the Surge tokens (used for push notifications) that we use on the backend are not deleted on logout.

Steps

To hammer out with @brianhatchet and @msantang78. This is going to likely be tricky to test as we do not digest push notifications on the front-end, just the mobile app. This may require us using a manual build of the app and plugging it into the associated sandbox.

I would recommend testing sessions and account swapping/triggering notifications.

Regression Scope

Changes v Impact

• api/v1/notifications - Simple change, setting the token on notif POST (from mobile).
• Session\Manager - limited to the destroy functionality, so would affect anything that destroys a session (e.g. logging out).
• Entities\User - added functions and an exported value, I don't foresee any issues here.

added scoped labels

Set to blocked pending chat with Brian and Martin.

assigned to @brianhatchet, @msantang78, and @benhayward.ben