changed /session/status to GET