replaced Role::PDS get_username(), get_user_ctr() & user_profile() methods with session data; google ajax url needs to be https if vcalled over https connection ie remote user
removed params & config tokens from before_template hook (automatic anyway); renamed search() to to disambiguate from 'var'; moved content of _validate_form() & _validate_nhs_number() back into routes (only 2 lines each); Path::Tiny in Role::PDS
