fix(Session): Add getAuthSession() to openAuthenticator class (refs #5291)

Pre-open a session with $sendCookie = false in openAuthenticator to
prevent sending cookies to the client (see #5209).