flesh out Session API implementation
handle calling info on an unknown session
add a quick sanity check from the Session API from Tornado