making session-member-logged-in dependency from accesstoken optional