KnoxSSO Authentication should not result in a valid JSESSIONID

The use of the KnoxSSO service should not allow for authentication caching with the session via JSESSIONID. At least not by default.

This improvement will allow session to be enabled for edge cases where this is required but by default will invalidate the created session upon cookie creation. The cookie will represent the session for these usecases and will not have any associated server side state.