Session implementation left up to class mixing in RestRoutes