dont store session when authenticating with token