Media session API

Service endpoint. Unauthorized requests are rejected.