Making sessionToken, userId, and authState publicly writable