I'm trying to use the Okta Auth JS SDK, if an Okta Session is already established in a browser using the oktaAuth.getWithoutPrompt() and if you call the AuthN endpoint to get a sessionToken. If you set the sessionToken in the oktaAuth.getWithoutPrompt() but since the browser has the Okta session cookie stored, if both values are passed which one trumps the other?

When I try to implement this scenario, on the second application calls getWithoutPromt I get an Auth Error about the user not being authorized even though it does. I'm wondering if the second call is not looking at the sessionToken I'm passing in and looking at the session cookie in the header.