Added support to check the STS for an authenticated session if not locally logged in (iframe silent renew) PR // Fixes #744 fix config bug with eager loading of the well known endpoints PR prevent routing in silent renew requests with iframes return tokens direct in forceRefreshSession