VER-3

refactor to handle stateless authentication
extract event bus converter into core module
add Java serialization converter
I read the opposite a few lines above: ```it is the application responsibility to store the user profile in session``` or does the ```CallbackHandler``` does the job?