Move the last auth token code to session module.