Description

We went through the process to create a custom auth manager for API auth and found some small problems in the example how to create a custom auth manager.
It's required to allow skipping rotate_session_id in auth_user_oauth, because otherwise there will be error messages like this one:

The other methods in FabSecurityManagerOverride like auth_user_db and auth_user_ldap also allow this already - we just need to add this also to auth_user_oauth.

Also the login_user function from flask_login needs to be removed from the example in the docs, because calling it results in the same error message.

• To be clarified with @vincbeck if this is fine

^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in airflow-core/newsfragments.