[server][FaceRest] Block a request without a session ID.

By this change, 54 tests of testFaceRest fail.
We have to fix these soon.