save session handle to refresh access token later