Use this endpoint to exchange a previously generated 'universal' token for a session. The returned session will be a regular session object with all its own credentials and metadata.