Move session attribute key constants into their own interface. Rename FEDORA_GROUP_PRINCIPALS to FEDORA_ALL_PRINCIPALS. Add some documentation of session attribute key constants. Grab attributes out of the session in smaller methods to limit the scope of suppression of unchecked warnings.