Use the session token if provided.