check session state whether user access token exists