Ready first set for others

Fixed commenting and changed session management to a) not allow the
option of passing credentials in the REQUEST and b) to use the
getAPISession method