title: Twinfield do you need sessions if using oAuth?
body: <p>I’m updating a third party app that currently integrates with Twinfield using the session’s method with username and password to use the oAuth method.</p>
  <p>In confused by the documentation though... do I still need to use the sessions or when using oAuth do I just call the endpoint(s) by passing the access token in the header as normal?</p>
  <p>Also their Soap definition has four properties, the usual ClientID and Secret but also accessSecret?  What’s that?</p>