added support for swap-in sessionToken for getCurrentUser()