add replace.token to enable token rotation for a long-running session