CR-2561 OPENAM-3202 fix to allow a greater diversity in what will be accepted as a relay state parameter while still sanitizing the input.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@7348 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
Fix for OPENAM-3210 - review: CR-2594
Did a small cleanup in getOrgParam, but mainly I've removed a very special
if that only decoded the realm for the new_org page if the encoded
parameter was set to true.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@7349 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
Fix for OPENAM-3259 - review: CR-2596
Modified the error handling for the AUTH_RESET scenario, instead of trying
to redisplay the login page, now we just show an error message.
Modified the logic in LoginState so if we receive a pcookie from a realm
where pcookie is disabled, now the login just continues like there was
no cookie presented at all.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@7350 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d
Fix for OPENAM-3252 - review: CR-2597
For SAML logins the LoginServlet should detect the authentication session
from the query string rather than using any existing cookies, that way we
can make sure that the SAML authentication flow will stay on the server
that stores the necessary request data to finish the SAML.

git-svn-id: https://svn.forgerock.org/openam/trunk/openam@7351 0f4defcf-c51a-4c67-9f44-6fb5eba73c5d