Simple session based token authorization hooks.