DDF-709 Moved SSO logic to HTTP Session