adapt providers for DPAE v0.600+ with plugin2 Moo architecture; realm_dsl no longer used; _get_query_params()accepts username str, not user href for consistency between internal & external calls to get_user_roles()

simplified session store of roles to single instance

initial commit - original deleted due to inclusion of password