Swith to AuthTktAuthenticationPolicy

Switching back from SessionAuthenticationPolicy to decouple sessions
and authentication; increase deployment interoperability; and provide
the groundwork for multiple signin.