For EAP authenticators, create a new instance of the passed-in
authenticator: EAP authenticators need to restart sessions for every
authentication request. See CAS-1320.