EZP-22045: Fix session creation via REST