sdk: session based authentication for /localhost is broken #916285

detailed explanation:
=====================

REST-API introduced new functionality at #876641 to JSESSION
based authentication,

if HTTP header Prefer:persistent-auth is set and client sends
the Authorization header as well, - will be re-initiated new
JSESSION, what is made all clients sending both Prefer and
Authorization headers to get authorised again using Authorization
header and not JSESSION,

correct behaviour is:
====================

1. send Authorization & Prefer headers
2. store JSESSION returned in cookie
3. use for authorization Prefer header & JSESSION cookie

disabling session based authentication:
======================================

1. omit from request Prefer header
2. add Authorization header

https://bugzilla.redhat.com/show_bug.cgi?id=916285

Change-Id: Ief0ed86c26c2e74b8cc8f46d68b01f904c50d0e2
Signed-off-by: Michael Pasternak <mpastern@redhat.com>