sessiuin controls

www-api/app/Controllers/WrenchApi.php

@@ -486,6 +486,19 @@ class WrenchApi extends BaseController
         $in  = $this->prepareEndPointData($endpoint, $raw_array,$call_backend,$local_out);
         log_message('critical', "wrenchboard_api-CALL PREPARE DATA".serialize($in) );
 
+        $ecludedEndpoints =  $this->sessionExcludedList();
+        $out = array();
+        $res1 = [];
+        if (!array_key_exists($endpoint, $ecludedEndpoints)) {
+        // we need to check session now
+            if ( $this->sessionCheck($in["sessionid"],$in["member_id"]) != PHP_API_OK){
+                $call_backend = false;
+                $local_out["status_msg"] = "invalid_session_msg";
+                $out['internal_return'] = PHP_INVALID_SESSION;
+            }
+        }
+
+
 
         if ( $call_backend ==  true  && $in["action"] !='' ){
             $wrenchboard = new  \App\Models\BackendModel();