fix: replaced old /rest/session/token paths with /session/token;