Thank you, but I still don't know how to authenticate my REST API session

Oh, I missed that 🙂
Actually, you can simply use the APIClient which does that for you.
If you want to keep using what you did, simply take the session from one of the built-in classes:
session = Task._get_default_session()