when you say you need it to set your token, are you trying to set up a bearer token for authorisation the client will use for the session only then expire?