Session REST API for handling user login and authentication