Bugfix on GENERATE-NEW-SESSION-TOKEN