Fixed code so it always passes the session token even for read operations such as listEventTypes.