Change session resolution strategy for ticket validation.

The session is not available from the ProfileContext since CAS ticket
validation occurs over back-channel communication. Use the session ID
stored with ticket to look up IdPSession using a SessionResolver component.