Drop superfluous re-authenticate attribute of <single-sign-on/>.
Use a constant for single-sign-on resource/path.
Add Lifecycle support to SingleSignOnManager.
Create SingleSignOnManagerService that properly invokes the lifecycle methods of the SingleSignOnManager.
Integrate support for distributable SingleSignOnManager.