supports simulaneous guest login via uniform session token