update access token on user record when sessions are created