updates to get access token from session variable