Properly redeeming auth tokens and generating session tokens now