/api/session/ GET (readme)