include incoming token for a session