more logging and simple test with token in session