This patch restores sushy session functionality to the
SessionOrBasicAuth by moving can_refresh_session to its parent
SessionAuth. Also fixed verify being ignored.
Closes-Bug: 1744378
Change-Id: Ia9ce0fe965f13e2d7f7634957306fa4ce6746b39
(cherry picked from commit d03a70f700)