OnlineInterface->GetIdentityInterface()->GetAuthToken(0);

this method returns a session ticket not an app ticket… case closed…