code: protected String getLockToken(String tokenHash)
     {
        for (String token : tokens.keySet())
        {
           if (tokens.get(token).equals(tokenHash))
           {
              return token;
           }
        }
        return null;
     }
docs: Returns real token, if session has it.
  
  @param tokenHash - token hash string
  @return lock token string