Session is a killer of scalability and it is difficult to maintain. Do not use it because it will cause you many problems once you start using web farms with load balancer and multiple web nodes.

Note that RESTful APIs must be stateless. When you use session, the constraint is not met.