Check new sessions by token not ID