Storing now the access token in sessions