Removed basic from authorization header in UserSessions endpoint