The Client doesnt control the passing of their token its completely automated on the completion of their Login, So the client cannot make a mistake as we dont allow them input in the process other then a login and a disconnect button to avoid issues.
The other users dont have the elevated permissions to connect on someone’s behalf but i do and have no trouble using anyone’s token but this one user.
@3ventic Yes we handle the login and generating the token on one server then pass that info to another server to handle the session and events