Start moving sessions API to common API dir
Factor out common code from API handling
Switch to using application/json for JSON transactions
Add tests that session handling verifies user
Rename closeSession to endSession within test code
Move startSession before endSession
Switch wall maker to new session API

And rename closeSession to endSession
Remove old session API