I have a session variable that I set like this:
Looks weird. That first chunk of code that resets the token must have been run again somehow.