Sessions in web api

Almost finished