Honor JDK7 without reflection
Make iron fist even stronger

- newer checkstyle
- sync rules with AS7
- check also tests
1.0.0.Alpha3
Next is 1.0.0.Alpha4
Enable support withing request dispatching for a resource accessed by a POST request to include or forward to static content.
Allow for the configured mechanism for a web app to be the named mechanism for programatic authentication.

Also a minor update to the notification API to identify notifications caused by programatic events.
fix a few typos
Fix problems with channel upgrade handler