instead of unnecessarily accepting an object 'generate_token' only accepts a single sessionId parameter