LDEV-3656: Invalidate user's session before trying re-authentication. Move the solution back to SAML as LoginRequestServlet uses current session for authentication, so the session can not be invalidated there.
LDEV-3656: Invalidate user's session before trying re-authentication, otherwise it results in a failed login page. Move the solution from SAML module to Central.