Rename api.auth to api.session
Uniformize API responses from session controller
Update API docs
Fix incorrect return on session creation