EnableSessionToken, /api/token however does not show any token, to be investigated.