granted_by_tgt moved to SPTicket

ProxyTicket uses granted_by_tgt as well, moved to parent class SPTicket.