Tweak session info name
Handle null obj in normalizeKeys
Support token in common options
Add opts requirements to session
Add acl support