Minor fix for Session token auth