Finally bashed my unauthenticated session bug. It was caused by the token being read as an optional. Implicitly unwrapping solved all my woes.