Safety check before parsing response
Use hawk from ext/ in tests
Move hello outside session
Change options to include token or credentials everywhere