server side changes for issue #329 - /csrf call is now /session_context and...

server side changes for issue #329 - /csrf call is now /session_context and returns current server time - to be used to allow clients with broken clocks to generate valid assertions