How many REST calls in a single HTTP session can be called safely?
There is no limit. Reusing the session, as long as possible, is preferred.
Reusing the session avoids having to re-authenticate which is faster. There are some limitations in the XC10 on the number of active sessions, so fewer active sessions is better.