What's the difference between the session and the token? - Better Auth