implemented GET /users/current?session=<ID>