[BUGFIX] Create session cookie when explicitly requested

The fix for issue #100695 reorganized the logic for setting
new cookies. However, the assumption - to only set a cookie
when the class property `$dontSetCookie` is disabled or a
permanent cookie is used - is wrong.

Previous TYPO3 versions were issuing new cookies, when
`AbstractUserAuthentication::setSessionCookie()` was invoked.
This change restores the previous behavior.

Resolves: #100787
Releases: main
Change-Id: I661a64546b99459eb81e466fdd5b03e56aeb6e93
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/78923


Tested-by: core-ci <typo3@b13.com>
Tested-by: Benni Mack <benni@typo3.org>
Reviewed-by: Benni Mack <benni@typo3.org>
Reviewed-by: Daniel Haupt <mail@danielhaupt.de>
Reviewed-by: Thomas Hohn <tho@gyldendal.dk>
Reviewed-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Daniel Haupt <mail@danielhaupt.de>