mock session api endpoint up and running