add session token cache; refactored passiver config apis