session_id will be deprecated, you should check for token