add: POST /session
add: Session::fromKey() to get a session from a session key