Move session attribute name constants into FedoraAuthorizationDelegate