added GET /session for checking if current session is still valid