Refactor away the old WSGI environ parameter.

Mostly replaced by cosnistently using the SSO session object to refer
to things in the current session.