fix(session): use the new TokenClient class