Merge "Ensure that requests are rejected as Unauthorized when the session token is invalid"