fixed session token expire
fixed phpdoc comments
added configuration injection into constructor of broker controller
added configuration injector into sso server controller