add session-duration test, test all api changes made to support recent

API changes for public terminals/shared computers, and update all tests
to post data using JSON rather than form encoding, as the front end now does.