Synapse session token saved as cookie. You can restart Tomcat, and still be "signed in" to bridge (user's session is recreated).