session based to token based user validation
loadRoom only if not user empty
maintainValidity when getting rooms
don't load room if no target