Removed sso query parameter from REST API - only accept SSO authentication using crowd.token_key cookie