Calling /user/sessions several times even though you already have session (in cookie header) with the same user.