Security configuration with redis support.

[wtrocki]

Motivation

Add redis to hold session.

Progress

• Moved critical passport.js JWT token implementation that was
  interacting with session config (required for documentation)
• Moved to use users as JWT payload (minor change with huge production implications)
• Refactored config - to improve our documentation (minimize sets of steps for keycloak)
• Included redis session into the code.
• Configured session to be based on redis.
• Improve coverage and unit tests spies.

Additional Notes

Steps to verify:

Keycloak and passport separately

1. Login to portal application
2. Restart server
3. Go back. Session should still be valid and user should be logged in.

[coveralls]

Changes Unknown when pulling 5506cea on wtrocki:RAINCATCH-1176 into ** on feedhenry-raincatcher:master**.

[coveralls]

Changes Unknown when pulling 5506cea on wtrocki:RAINCATCH-1176 into ** on feedhenry-raincatcher:master**.

[JameelB]

Verified locally