fix auth token session getter