/session/:sessionId/key implementation and test