Rename session token to auth token