While trying to use Facebook's mobile authentication, I realized that they don't set any session key cookies now, and only deal with access tokens. From what I've gathered, access tokens are how the new OAuth2 system works, making session keys somewhat deprecated. Is my only choice to update the code to use access tokens, or is there a way for me to get a session key when I only have the access token?