CAS-1238 MFA Support

API changes:
1. Support for authenticating multiple credentials
2. Authentication policy framework

The most exciting feature of this patch set is support for a simple mechanism of driving authentication security policy with registered service metadata. The test cases in MultifactorAuthenticationTests (and corresponding Spring XML context) demonstrate this capability and provide a good starting point for review.