Tests for sessionToken handling