Set session by params[:token]