API: session and own profile management done.