Initial working copy of encrypted security tokens.  Still much cleanup to do.
Cleaning up previous changes and updating the way in which the container's initial token is injected.
Changes for unit tests.  OSESecurityTokenCodec doesn't need to be a ConfigObserver.
Merge branch 'issue-30-encrypted-security-tokens'