The commands for the resource are as follows.
/session IDENTIFIER PASSWORD – Switches the user to the IDENTIFIER session using the PASSWORD value, with the identifier & password being case-sensitive. If the session does not have a password, the user does not need to provide one.
/protectSession PASSWORD – Protects the current session with a password, this cannot contain a space and is case-sensitive. The default session is protected from having passwords set.
Once the session empties unless the session has the configuration value clearPasswordOnExit set to false it will remove the password allowing users to connect without a password.