SDK improvements

- Using Session for storing user
- Getting user from Auth0
- Storing tokens object in session
- Removed HTTPClient in favor of Resty
- Simplified code for Filter and Callback handler
This method should be protected (and preferably not renamed to improve backwards compatibility) to allow our customers to customize the store. We have some clients who are already using the old method.