checking over sessions for RESTfulness