[Security] fixed session creation when none is needed (closes #6917)
Merge branch '2.1' into 2.2

* 2.1:
  [HttpKernel] fixed the creation of the Profiler directory
  [Security] fixed session creation when none is needed (closes #6917)
  [FrameworkBundle] removed obsolete comment (see 2e356c1)