VER-3

refactor to handle stateless authentication
extract event bus converter into core module
add Java serialization converter
I'm surprised by this ```isRequiresHttpAction```. The meaning of ```RequiresHttpAction``` in ```pac4j``` is to trigger some HTTP action (401, 200) which is NOT a default redireciton (302).
I'm not sure it has the same meaning here. Confusing.