fix(httpapi): reuse exact session response schema