• use a browser that has no session cookie set for ez
• send a request to eg. index_rest.php/admin_site/api/ezp/1/content/node/2
  and you get back 2 session cookies

if you try 2nd access, where you already have a laid session cookie, rest controller will send a different session cookie, but at least it is one