SDK improvements

- Using Session for storing user
- Getting user from Auth0
- Storing tokens object in session
- Removed HTTPClient in favor of Resty
- Simplified code for Filter and Callback handler
You're right :).

I'll make it protected