modify session socket - token validation