removed global access tokens and added user profile to session