LDEV-3338: Upgrade jdom from version 0.7 to 1.1.2 shipped with WildFly. There is a version 2.x available, but it has different API and it would have to be included as a separate library again.
LDEV-3382 Add datetime parameter check to LoginRequest. It must check for "a range" of TTL that is datetime parameter provided can't be too far in the future as well
LDEV-3335: Put UserDTO in session as soon as possible after authentication, so it is available after redirect. Response is sent by a different thread than SsoHandler and if it wins the race, index page is rendered with UserDTO missing, resulting in error.