updates for authentication_token in sessions