Support session token authentication