GPII-17: Use authServer.standalone in singleProcessAuthServer
GPII-17: Updated to newer version of Kettle - "requestOptions" has been removed from all kettle.test.request.http etc. as well as duplication caused by URL expander grade names. Cloud-based acceptance tests have been rationalised to simply provide solutionId value rather than the previous bizzare URI-encoded literal JSON. Removed last literal references to KettleTestUtils path. OAuth2 tests have now got as far as the "authorization decision" request - details for this now need to be filled in. Some improved commenting and diagnostics, proper 401 status code on trying to access FlowManager without a session.