Fix EZP-22220: Session creation in REST API doesn't use Symfony SecurityContext

https://jira.ez.no/browse/EZP-22220

**Still WIP, DO NOT MERGE**