Finish auth token management, implement flow session getter API call