pub async fn get_session(auth: Authenticated) -> Json<Value>Expand description
GET /api/session — who am I, and what is my CSRF token.
The CSRF token is returned here as well as at login so a page reloaded on a still-live cookie can pick it up without signing in again.