Update auth0-security-context.xml

adding create-session="stateless" to avoid the creation of sessions