get sessions call returns public sessions not belonging to user

[antoinefalisse]

This call will return public sessions not belonging to the user.

def get_user_sessions(user_token=API_TOKEN):
    sessions = requests.get(
        API_URL + "sessions/valid/", 
        headers = {"Authorization": "Token {}".format(user_token)}).json()
    
    return sessions