CFID-242: Add support for RSA key in JwtTokenEnhancer and UAA

This mainly builds on changes to the JWT module in
Spring Security OAuth. An RSA key in ssh format can
be injected instead of an HMAC key and will be used
for signing tokens.

The default uaa.yml file now also specifies an RSA
key pair.

Change-Id: Ie2efdc5bd825b7885f7fed20a6978f27f57a3d69
CFID-266: add integration test
CFID-241: add user_name to /userinfo
CFID-248: add oauth.client.override flag
CFID-262: add client secret endpoint and docs
CFID-264: fix filter to match email not username
CFID-258: add uuid to UAA varz registration

Change-Id: I3a720d1ecf00ce8da5c6b5269fc505756e34643b
[gem] Avoid equal sign in Gemfile

  This change
    - Replaces `=' (equal) with a small bracket of versions to avoid a
      Rubygems / Syck bug
    - Bumped cf-uaa-client gem version to 0.0.10

  Test plan:
    - Pass unit tests
    - vendor into cloud controller and pass VCAP unit tests
    - Pass BVT's on BOSH deployed instance
    - bump sha1 in vcap git_src branch and pass BVT's on dev instance

Change-Id: Ieed6a63c47be7f7fb846d7501d1bba54d1bf2c42
CFID-257: Add validation of client details.

Creating and updating client details checks the grant
types are valid and also whether a secret has been set
if required by the grant type. Non implicit grant clients
with an empty secret will be rejected as will implicit
clients which have a secret set.

Change-Id: Id52533aae5196289c7d25396f36f6dd74b00a44c
CFID-256: Add denyAll filter chain.

The UI filter chain is now configured to only match the relevant
specific patterns which it can handle and an extra filter chain
has been added which any other request will fall-through to, getting
a 403 response code.

Change-Id: I6c71ab679d6359303f1389f8b89584ecbeb50856
Update SQL schema

Change-Id: Iae39c95e6a9c2b2907bd5aad92363de23afd493c
Merge "CFID-256: Add denyAll filter chain."
Merge "CFID-257: Add validation of client details."
CFID-271: fix authz filter
Add integration installation for app sample

Change-Id: I146d7c6803f12d2f20d20fb5f8b12ff9b379b72d
CFID-241: use user_name not user_id in OpenIdUserInfo

Change-Id: I6e2f51128d7bed9a526b7604131402c22d67478b
CFID-273: add remote scim provisioning

Change-Id: Ia2d4ba0951d90f542c9f3706ea643c56a1ef7abe
CFID-274: rationalize Yaml factory beans

Change-Id: I883cdb46e05528dbfe0b82e6818642de7287b7db
CFID-271: fix uaa matcher so it allows form encoded responses

Change-Id: I3151baf56e6d292ac18c745e77a89fd168684c78
CFID-276: check security config and adjust

Change-Id: I67a74a8a29da2fc705b84609e2f5f935e34de193
Merge "[gem] Avoid equal sign in Gemfile"
CFID-270: improve cli for debugging redirect uris

Change-Id: Ia022bede9b173f23cf4f162b6a0d9a49bec2e5a3
CFID-269: log the first 1000 accounts processed from CCDB

Change-Id: I449d1880a830a89042e02175e3a274eb5c16c0fe
CF-23,CFID-266: move integration test to api sample

Change-Id: I23c8a4703fe7bc426eb5b39ba691d0bb84e3a09d
Fixed the uaa start up router registration to use the
loopback ip instead of localhost because the router
stopped routing requests to it.

Change-Id: Ide3e3949503543f99d4d7ab0ff514837f95f34f3
Updated uaa startup script to work with
a pre-configured tomcat instance.

Change-Id: I42e1e082d1caa1911a0ff83427d50f0ebed8ed5f