Add LocalSite rooting for the SessionResource.

This adds the local-site check, plumbs *args and **kwargs through get_links, and
adds unit tests for the SessionResource (/api/session).