change name of session token to session