fix authentication.

reviewboard is a django project. all URLs need to be /-terminated unless the
site is configured otherwise (there is a config option to append slashes but
it is not necessarily set).

anyway, URI in the doc is /api/session/ so it must be right.
http://www.reviewboard.org/docs/manual/dev/webapi/2.0/resources/session/