authenticate(resource, session) -> ok?
get_session(token) -> session