final remove of session collection in code, not needed since token addition