- added "extends Serialization" to avoid problems when
serializing/deserialing Sessions
- removed unnecessary modifiers from interfaces
added test to check Authz.intercepts(null) (expects
IllegalStateException)