I want to build REST API using Express. Aside from resources there are endpoints for authentication stuff like signup, signin and user option (the view templates are loaded). It's common practice to use sessions for messages but how can I handle this for REST API? IS it okay to use for example express-session for flash messages only or I need to resolve this without session?