Changing the Session object the way it was done previously
interferes with the new caching mechanism. The objects are
now long-lived so any direct changes to it which are not
in the spirit of its use case have to be removed. In this
case, changing the creator information invalidated many
of the isCreator checks sprinkled through the code, as
the new creator's name would have been the string
"not visible to you."

Added few pp Attributes to SessionInfo. Requests for Public Pool Sessions now return SessionInfo instead of Session.

Updated copyright year and adjusted header format to be consistent over
all files and with other ARSnova projects.

The creator name is only visible to the creating user itself.

SessionController: Append integer to a string will result in a string
ApplicationPermissionEvaluator: Code formatting
UserService: Create new user object instead of assining parameter reference
ARSnovaSocketIOServer: No exceptions are thrown

Spring security based permission check will do this for us.