Sessions for access token storage, beginning to break out into functions