Update apiary with cleaned up users and session endpoints

I've just updated the apiary definition, so we can work on to of that....

we can discuss in this pull request