A developer should be able to make REST calls using the same session as the one used for logging into the application.
Currently, 90% of REST calls are treated as sent by an anonymous user, even if they're sent by a logged in user, using his session data.
The goal here is to make the same session for backend and REST api.