added check for no session token