CORE: added refreshSession(sess) method

- Added method for refreshing user and authz in session.
  It's for case, when user join identities and we want
  to get new user into session, without whole logout/login.

- Added javadoc for refreshAuthz(sess) metod.