Use a better id for storing the token in session.