Removed sso.urlbypass to combine with sso.bypasskey
Migrated from using cookies to sessions for SSO status flags
Added SSO configuration to com_shconfig