Security - Create token key to authorize the request with session key and userId