added cancel token link to ensure session calls are cancelled if endpoint session token is cancelled