LDEV-3338: Upgrade jdom from version 0.7 to 1.1.2 shipped with WildFly. There is a version 2.x available, but it has different API and it would have to be included as a separate library again.
LDEV-3382 Add datetime parameter check to LoginRequest. It must check for "a range" of TTL that is datetime parameter provided can't be too far in the future as well
LDEV-3335: Put UserDTO in session as soon as possible after authentication, so it is available after redirect. Response is sent by a different thread than SsoHandler and if it wins the race, index page is rendered with UserDTO missing, resulting in error.
LDEV-1978, LDEV-3340: Remove AccessPermissionFilter. It was designed to control lesson access for Learners, but it was not really used. With the new SecurityService it is/will be obsolete.