impr(webapp): client side & cookie auth handling

- make sure authentication cookie is always updated if user gets a 401
  response
- make sure user is not redirected from #/setup

related to #CAM-1074 related to #CAM-1023
Merge branch 'master' of github.com:camunda/camunda-bpm-platform