refactor Sso to get user before force auth
move stuff around
don't get unstable stuff
fix session
Merge pull request #5 from eseyden/master

Refactor SSO