Remove sessions in anonymous (user auth disabled) mode in WebUI server

Currently we open anonymous sessions when user auth disabled. These sessions are cleaned up when they expire (controlled by boot config drill.exec.http.session_max_idle_secs). This may lead to unnecessary resource accumulation. This JIRA is to remove anonymous sessions and only have sessions when user authentication is enabled.