This feature is used by the coder agent to exchange a new token. By protecting the SessionToken via mutex we ensure there are no data races when accessing it.
Fixes an issue reported in Discord where custom endpoints weren't working.