auth service now stores accessToken in session data