Update Session docs
Pass access token to API and remove TODO