 
       return
 
-    Models.JApiToken.createSessionByToken token, (err, session) ->
+    api.JApiToken.createSessionByToken token, (err, session) ->
 
       if err or not session
         return callback apiErrors.unauthorizedRequest

      sendApiError res, apiErrors.unauthorizedRequest
      return

    fetchSession Models, options, (err, session) ->

      if err
        sendApiError res, err

        return callback apiErrors.unauthorizedRequest

      if session.getAt 'sessionData.apiSession'
        api.JApiToken.fetchGroup (session.getAt 'groupName'), (err) ->
          return callback err  if err
          updateSessionTimestamp session, callback

