Clarified how the service generates session credentials