Tie token for session to specific user