Use Signed Fetch between Shindig and Nuxeo

When Shindig fetches some data from Nuxeo it currently use a "hack" to propagate JSESSIONID.
The correct solution is to use Signed Fetched between Shindig and Nuxeo.
For security reason, the shared key will be shared in memory and dynamically generated at startup time.