LDEV-3335: Set session cookie path and domain in TestHarness. Without it, and with session fixation attack prevention on, WildFly does not accept the cookie during authentication.
LDEV-3335: Put UserDTO in session as soon as possible after authentication, so it is available after redirect. Response is sent by a different thread than SsoHandler and if it wins the race, index page is rendered with UserDTO missing, resulting in error.
LDEV-3316: Get rid of HibernateTemplate and HibernateDaoSupport usage in set of LAMS DAO types from lams_tool_forum. Move DAO hibernate implementations to 'hibernate' sub-package. Introduce DAO interfaces and use references to them instead of to implementations in ForumService.
LDEV-1978, LDEV-3340: Remove AccessPermissionFilter. It was designed to control lesson access for Learners, but it was not really used. With the new SecurityService it is/will be obsolete.
