Update create session default values

[adfoster-r7]

Updates the Metasploit RPC functionality to not open new SMB, Postgres, MySQL, MSSQL sessions by default.

The issue is caused by Metasploit's RPC exposing an options API with a default CreateSession value of true. The RPC functionality does not take into consideration the Module's DefaultOptions key:

      # some overrides from authbrute since there is a default username and a blank password
      'DefaultOptions' =>
        {
          'USERNAME' => 'sa',
          'BLANK_PASSWORDS' => true,
          'CreateSession' => false
        }

There will be a separate effort to update the RPC layer to expose the default options to users correctly, but for now let's swap the default value in the module options itself

Verification

• Ensure tests pass
• Ensure the module's option metadata still shows the CreateSession option as false

[zgoldman-r7]

Changes seem to reflect in the options locally 👍

[smcintyre-r7]

Release Notes

Fixes an edgecase present in clients that programatically interacted with Metasploit's remote procedure call (RPC) functionality that caused the login modules for SMB, Postgres, MySQL, and MSSQL to open a new session by default instead of it being opt in behavior.