added support for drop-in session tokens

Using this on a server, it seems to make more sense to allow per-call specification on the session token, rather than only taking it in as an across-the-module variable.