Fixes #3765: Added `yii\web\User::enableSession` to support authentication without using session