session token bug tracked