do not save the session if there is no session token