expanded out session_token