# curl 'http://ez5.local/api/ezp/v2/user/sessions' \
 -H 'Content-Type: application/vnd.ez.api.SessionInput+json' \
 -H 'Accept: appication/vnd.ez.api.Session+json' \
 --data-binary '{"SessionInput":{"login":"admin","password":"publish"}}'
{
    "ErrorMessage": {
        "_media-type": "application\/vnd.ez.api.ErrorMessage+json",
        "errorCode": 401,
        "errorMessage": "Unauthorized",
        "errorDescription": "User does not have access to '' 'Missing or invalid CSRF token'",
        "trace": "...",
        "file": "\/home\/ez5\/www\/vendor\/ezsystems\/ezpublish-kernel\/eZ\/Publish\/Core\/REST\/Server\/Controller\/User.php",
        "line": 997
    }