Modular restful server with session authentication