tokens can be now created with a given sessionId