It would be useful to expose user session data in the API.
That would allow to monitor the number of unclosed sessions and, to some degree, user access rate.