Don't update session token when returned header is empty