More restful endpoints for user and session