Rename token to session, that holds access token.