Allow dynamic session creation

[bpbecker]

Allow a setting such that the client can be assigned a session without first calling StartSessionEndpoint.
Such a request could also include basic HTTP authentication credentials.