The session that should be passed both ways in challenge-response calls to the service.
The status of the verify software token.