adding session_token url param to match header