Add API for getting list of sessions
For now, don't list session information without authorization