[keystone] How to create a session using trust-scoped token