REST endpoint to expire/resume session