fix extsession and logintoken creation