...
where you would have to replace the "{session}" with an appropriate value for the session's ID session.
MUST vs. MAY
When calling the REST API there are some parameters defined as a MUST and some parameters defined as a MAY. All MUST-parameters. If a parameter is defined by the URL that is called and enclosed by curly braces it is always a MUST-parameter. If you ignore this you are calling a different URL that might exist but do something different.