update copyright
Revert "bypass private_token check for session API call"

This reverts commit bf4512f2b0396977d89cef9b158fe97ad25e054a.
set private_token param separately for each request