improve session controlling through new token authentication method