TEZ-633. Fix client security for Tez session APIs. (sseth)