Minor commenting fixes
Fix to HTTP session handling in REST launches

The AnonymousAuthenticationFilter no longer creates an HTTP session when
attached to the /simplerestrunner URI. Instead, a special AnonymousUser
is created for this request only. (An HTTP session is still created when
the resulting /simplerestrunner/launch URI is subsequently invoked by
the end user.)

(This would benefit from a further minor tidy up...)