| Log Message: |
Decouple user management from session. The accreditables are now only referenced by the session and not stored in the session itself. This allows to restore the session by the servlet container, and it allows to transfer a session from one access controller to another (i.e., from one publication to another). |