fix(di): fix circular dependency on auth module

put session service into superdesk.session module within auth