IDP3/4 -> read (&write) custom session cookie for authentication

[Cantor, Scott]

The type of that bean is different in 4.3.

Look at the release notes for details on the conversioon to the supplier bean to access the servlet request, and in general avoid auto-wiring and anotations. They are not suited to production use cases, those are toys that are focused on Spring as a rapid deployment tool. We use them, but we also understand their (huge) limitations.

Our contract is through class types and bean names, but never the combination of the two. That will not allow for safe upgrades.

-- Scott