#1234 session endpoint

* Added `GET /session` that returns the current logged-in user.
* Added endpoint to the API explorer for testing