There was some talk about this on the forums before but I didn't really see an answer.
I can't use SessionVar (it only works with the web interface) and the REST interface generator doesn't seem to allow using HTTPServerRequest/Response parameters like the web interface generator does so I can't access a session that way. I saw some stuff about using @before but I don't understand how that would help (@before doesn't appear to be documented that I can see).