This shouldn't be necessary - when the `auth_token` is present the session ist still valid.