Made is possible to disable sessions for user defined routes

Small tweaks to web request and API