build new Session auth when either key or scheme changes
add Session to ConnectionFileMixin

it’s used in a few places, so it doesn’t make sense for subclasses to lack it
ConnectionFileMixin is a LoggingConfigurable
test loading connection file after instantiating Session