DDF-709 Moved SSO logic over to using HTTP Session