prohibit setting session keys other than the ones in me_fields
removing me endpoint, fixes #166