This token is only used for the chat, it isn't an official API.
* create a new token on a new session * delete the current token on session exit