Add naive session tokens implementation
Update TODO