Stand-alone authentication and SSO service for web applications and RESTful APIs