has anybody implemented the session token rotation on their app? I'm kinda struggling doing it and would like to see your approaches