Session Authentication as a part of RESTful API