updated packages, moved to token session tracking in lobby