Implement the session endpoint and GET method.
Add back restriction per format.
Test session endpoint when the user is not admin.
Correct the user name.
Merge pull request #18 from dickolsson/2370257-_session-endpoint

Issue #2370257 by jeqq: Implement GET for the /_session endpoint.