get token for session works

need https for devicelinking I think.. bugger :/