Improve handling of expired session on the client

[ebruchez]

• we send 403
• 401 would be more correct
• unofficial 440 (used by Microsoft) would be possibly better

+1 from customer

[ebruchez]

Assuming we decide to use a 440:

• server to send a 440 in that case (instead of a 403, currently)
• when the client detects a 440, do something similar to login page detection (blog)

[ebruchez]

+1 today in relation to #5896.

[ebruchez]

• currently calls showLoginDetectedDialog(), but with When the session expiration dialog is enabled and the allotted time expires, log the user out #5896 consider showing new dialog
• port to other branches

[ebruchez]

showLoginDetectedDialog() is at XForms level, but new dailog from #5896 is at Form Runner level. Handle using listener.

[ebruchez]

For 2021.1.x and 2022.1.x, we don't need to handle the dialog of #5896 since that's not present on those branches. So we can backport if we'd like.

[ebruchez]

• dialog can show under Form Builder Publish dialog

[ebruchez]

Deciding to test a little more before including on 2022.1.x. and 2021.1.x.

[ebruchez]

We actually included this in the 2022.1.5 PE release as well.

[ebruchez]

• enter new issue for using the Form Runner dialog

[ebruchez]

Entered #6102 issue as follow-up.

[ebruchez]

Checked that we haven't yet included this in the 2021.1.x series.