fix: replace static variable with private one, two instances of resource does not share session now
fix: SessionResource returns blank response instead of undefined json
refactor: split api response method send
prepare test environment
test: read all users