Create session on login request if it doesn't exist