Set $token to session var if provided