Also, could you provide the actual error message? It should be returned to you in your rest client.
Lastly, are you trying to log in as an admin at user/session?
It's a common misstep we've seen.
Users log in at user/session
Admins as system/admin/session