added session handler to web apis (from http://www.strathweb.com/2012/11/adding-session-support-to-asp-net-web-api/)