augment api: create session with access token