ditched unneccessary ilios cli controller.
added shib session change detector hook and supporting infrastructure. refs #3284
added passthrough for requests to controllers that do not require user sessions.
restricted access to public methods only for non-remapped requests.
changed how out-of-sync inner/outer sessions are handled to a cleaner solution.
Merge branch 'master' into bug3284
fixed various glitches in the checkShibbolethSession() hook function. added code docs.
improved action remapper function to better deal with non-existing methods.
ripped out user-session synchronization code. it worked, but did not solve the problem with SSO that it tried to address.