you shouldn't need to do session handling if you are going REST. Rest is all about not having state. If you need authentication, authenticate on every request. If your request needs some additional info to give a response, pass that information in when sending the request.

It's really a different paradigm and sometimes it can get really painful to move away from the way of thinking that we are used to.