JPA factory now initialised and destroyed in context listener.

This is so we don't end up with multiple factories.

The LoginHeaderFilter now uses simply the auth key class, since holding the
user model would in turn hold a reference to the entity manager, meaning that would
always be in memory no matter what.