Introduced use of VaadinSession to retain current Subject; modified
V7SecurityManager, DefaultShiroWebModule to be no longer web based.
Introduced VaadinSessionManager.  Fixes #180

Authentication seems to work correctly but there is still an issue with
reflecting the current login status via the user interface, see #182