added session tokens to URLS