Good point, this is just creating a session, so Renaming it to SessionResource sounds good to me. I don't think there is direct access to the user domain objects, so that makes sense. :)