Hey RP, quick question: Does 'getSession()' call the DB? and one more important question: /refreshSession endpoint can be called an infinite number of times, making as many sessions as you want, shouldnt this only be able to be called when the previous session has expired?