Bug844796 session token generation