Save token in session