Nicola,The code I mentioned in my post, gets called for every page refresh, on other words for every login to the room. Obviously it is not creating a new sesssion, hence so new authtoken. I read the link you sent. It does not say how to create a new session. I only know the getsession() call from l...