Include the unaliased username in SSO session details

When an application has an alias defined then session entities will use the alias. In some cases, applications that are aware of usernames may want the original unaliased username as well.

Update the session entity to include an extra optional unaliased-username element.