Cookieless-version for SPA

[Padi-owasp]

Or document usage with SPA (including state saving on re-authentication / redirect to OIDC auth server).

This is also in preparation of allowing easy-login later.

Tasks: (-) Assess Options (-) Define Concept (-) Implement Solution (-) Test Functionality (-) Update documentation