change session API to return user ID and name in JSON response