SEC-1894,SEC-1920: Add XML support for configuring custom InvalidSessionStrategy