Set token to session var