At https://doc.ez.no/display/EZP/REST+API+Authentication there was an example previously for using session-based authentication.
It was removed since there was a slip error in it.
An example still needs to be kept there, IMHO.
Brought up from testing EZP-23857.