CAS-1367: Move spring webflow conversaional state onto the client

Webflow conversations are managed server side in the session. Moving this state to the client with sufficient security would ease the issue with session timeouts and the need for session replication, etc.
No longer for webflows.

However, we still use web sessions for pac4j client support and OAuth server support, but this mechanism is not necessary in that cases.