Remove anything related to sessions

Using sessions is a violation of REST principles. Since this
is going to be a RESTful api, it should be stateless.