Refactor of user session handling

Remove session interceptor, controllers now supply a raw HttpServletRequest
to the Action, so the remote ip address is available even if no user is logged
in (useful for geoip lookups)

Start of weather service (will make use of geoip if no user)