Address SessionLimitStrategy

Closes gh-16206

Author: ClaudenirFreitas

config/src/main/java/org/springframework/security/config/annotation/web/configurers/SessionManagementConfigurer.java

@@ -120,12 +120,12 @@ public final class SessionManagementConfigurer<H extends HttpSecurityBuilder<H>>
 
 	private SessionInformationExpiredStrategy expiredSessionStrategy;
 
-	private SessionLimitStrategy sessionLimit;
-
 	private List<SessionAuthenticationStrategy> sessionAuthenticationStrategies = new ArrayList<>();
 
 	private SessionRegistry sessionRegistry;
 
+	private SessionLimitStrategy sessionLimit;
+
 	private String expiredUrl;
 
 	private boolean maxSessionsPreventsLogin;