However, I have doubts if I have identified the correct access token since I cannot identify it sometimes from the network traffic. As I said previously, some tokens are clearly defined as access tokens, but others come as JSESSIONID, EG_SESSIONTOKEN, etc.