look up CN url for portal servlet instead of hardcoding it.
use null session for now
draft of legacy-to-d1 account mapping interface