SEC-1894: Add XML support for configuring custom InvalidSessionStrategy