Fixes #1535: Improved `yii\web\User` to start session only when needed. Also prepared it for use without session.