Test that an owner can add more sessions.
[API] List all sessions and allow owner to clear sessions.
[API] Make it more clear which paths require authentication.
[API] Only require text/yaml for POST requests.
[API] Standardize YAML error responses and cleanup.
[API] Consolidate auth and request/response helpers.