http header OCS-ApiRequest: true is required in case of session based OC...

...S API calls

@LukasReschke @karlitschek THX