Move session token check