started session management with rest usin token mechanism