tweak spec files, add session tokens