mediawiki.user: Use session ID instead of 1-year cross-session cookies

No cookies should be assigned for longer than session expiry.

Bug: 44327
Change-Id: If2f096dadb639769d859e1596d84b3ad5775a01d