version 3.3: fix clustered setup by externalizing ProxySSOSessionState