Remove sessions from API; make stateless