https://getmypassword.com/what-is-a-session-token/