Allow admins to GET sessions