Show both client token and session tokens - format in HTML