now tokens support session id