eb-6915: converted CXML to use token based authentication (sessionId)

created placeholder for punchout timeout page, punchoutTimeout.jsp, which is used for punchout authentication failure
added @Deprecated annotation to XPEDXPunchoutCustomerLoginAction to clearly indicate it as the legacy functionality that will go away in a future release
refactored XPEDXWCUtils.handleApiRequestBeforeAuthentication to support strongly typed (Document/boolean) parameters
EB-6961. Simplified the request/response process ( Removed buyer, multi ship-to) added more format and data validations.
EB-5603: Made changes to the CSR list