When you make a call to

/studies

, you are essentially doing machine to machine request. This is different from frontend (website) to machine request. Frontend -> machine requires session management like how we have Machine -> machine requires API key. So when you make a call to

/studies

, you can pass in a secret API key along with the userId (which you can get from

session.getUserId()

)