The endSession cannot run with a security token yet. We should change the code to have it work with security token. Also, let's check for any tests with a "not_allowed_with_security_token" tag specifically because of endSession and to remove it.