fix: serialize responses in /api/v0/sessions resource