Mobile API - login ok but no other action possible

[jedrus]

Hi,
I'm trying to authenticate and get buddies using vbulletin mobile API.

First, I'm calling api_init and I'm storing:
- apiaccesstoken
- apiclientid
- secret
- apiversion

Next - login_login request.
Response for this request is successfull:

{"session":{"dbsessionhash":"9d55acf45237f22f340c46b91b183772","userid":"0"},"response":{"errormessage":["strikes","http:\/\/forum.xxxxxx.com","api=1&"]}}

After this, I'm trying to call api misc_buddylist but this request allways failing with no permissions error

"{\"response\":{\"errormessage\":[\"nopermission_loggedout\"]}}"

What I'm doing wrong? Should I remember dbsessionhash or do something else?

Here: https://www.vbulletin.com/forum/cont...ess-Mobile-API
is some explanation:

Because of technical limits, this method is unable to return a new securitytoken. So after this API call (login_login), client should call api_init (get new session as well as new common $show variables) or api_getsecuritytoken to get the new securitytoken. Once the client gains both the new sessionhash and the securitytoken, please save them in application session vars. After this the login process is done. You need to pass the new sessionhash to the API and use the new securitytoken to sign the requests in future API method calls.

But I do not know how to do it.

thanks for any help!