[v13] always require MFA when joining a session if at least one role requires session MFA

[v13] always require MFA when joining a session if at least one role requires session MFA #61130