fix(session): resolve identity only if we have valid token

SD-1085