SSP-1387 Do not require a session in KeepSessionAliveFilter

KeepSessionAliveFilter was using getSession(false) but then not
checking if the result was null. The session really should be null
on any OAuth2 call.
SSP-1387 Move OAuth2 Tokens storage into the database.
SSP-1387 Add licesne headers