Add authentication to /sessions.json route, fixes #147

[abjugard]

Please check this and merge asap, my freedom is being actively oppressed!