Key of dict in session is changed back to policy.object.
User's session key - sess_key is added. Timestamp is moved to token
under b64. Only policy is stored in the session (key -
b64(policy.object)).