Added POST /user/session/validate.