CAS-1310: Complex attributes are not properly returned by the OAuth /pro...

...file url

I decided to move the ```JsonFactory``` object from inside the method to the more global level of the controller following the javadoc http://fasterxml.github.io/jackson-core/javadoc/2.0.6/com/fasterxml/jackson/core/JsonFactory.html :
*The main factory class of Jackson package, used to configure and construct reader (aka parser, JsonParser) and writer (aka generator, JsonGenerator) instances.*
***Factory instances are thread-safe and reusable after configuration (if any).*** *Typically applications and services use only a single globally shared factory instance, unless they need differently configured factories. Factory reuse is important if efficiency matters; most recycling of expensive construct is done on per-factory basis.*