Unapproved provider attempts to log into application
Add session_token to Provider
Approved provider logs into application