Added support for --vmc option to uaac

Change-Id: I9b57ecbb87dce1fa067ec6c5575a9fa431c8cdca
Update versions post 1.1.1

Change-Id: Iee51c9d426ff46efceafb4d4259993c1bdcb6572
CFID-246: re-order initialization callbacks

Change-Id: I4ae61df02870ee0b2c39e60404454323f6a590ec
CFID-400: initial re-org of spring config files

* add spring subdir for context files
* extract 403 handler to parent
* extract endpoints groups into separate files
* use naming convention for files containing endpoints

Change-Id: Ibdcbbfdc340bde07a902056b86413898d2748b2b
Misc tidying (imports, spelling etc.)

Change-Id: I6835f50ee1eb7307ae69ad6480449c59afbe74cd
CFID-404: remove deprecated classes

Change-Id: I059078f601eda6929387a1a25a79a800b9bc0644
CFID-403: add docs for Login Server contract

Change-Id: I918fd6d6d9e4bb440b44245cf0d763d29be40e66
CFID-382: add maven enforcer plugin to fail with wrong mvn or JDK

Change-Id: Ib9d1b55939a508478c139c278baa6853c58131a5
Updates for IE

Change-Id: I9bc073dc9ba1b3b504f1851a12031045900ead54
Merge "Updates for IE" into develop
CFID-376: make public key accessible to all if set

The default key in uaa.yml was removed (so back to
shared secret tokensecret) to make it easier to test
the secure option.

Change-Id: I2c7bbecbcf3e9f0d3253b3509e3de559b6f28998
CFID-390: fix integration test (needs more work)

Change-Id: I15db10bab722f3318b325c759f80c9e6bbfd2c15
CFID-400: fix ordering of token admin and client admin endpoints

Change-Id: I047ca03472d36e41ae4fed8b970bfa59088e53c6
CFID-405: Tighten up Login Server authentication

In particular it should not be possible to authenticate without
a username.  Also the default now is to check for the existence
of the authenticated user if they are not being added automatically.

Change-Id: I4e588b93eab6e53df0c1b5883fb0cd9427ef0b6f
CFID-407,CFID-411: Token admin endpoints updates

* Fix not found response to render JSON if requested
* Be defensive about bug in SECOAUTH-325 when listing tokens
for client

The fix for SECOAUTH-325 should be adopted as well since
otherwise you get misleading results from the clients
token endpoint, and there is a memory leak if revoking
clients through that endpoint (the users/*/tokens/* works
fine).

Change-Id: I5f5d7cdc5ee9241dd4333f6aa8067cb3512db47f
CFID-406: add UAA-specific authentication key generator

It shares a single implementation of another strategy
UserTokenConverter for extracting token data from a
user authentication.  So the token contents and the
key should match if the user account changes.

Change-Id: I0b2adeb8029484d1d57ddcc6b37947074933980d
CFID-399: change comment to reflect reason for catch

Change-Id: I8baefe869a15206f6ea5b761441bcf06c6a79e27
Fix profiles in top-level POM to use postgres with -P vcap

Change-Id: Ifb07f11f08871df4bdcc1685cdff1159471e0535
CFID-417: Use display instead of externalId

Change-Id: Ic83af0cfc76a379c6cb5b4abb056304d296ee703
CFID-419: tidy up maven dependencies

Change-Id: Ia98cb0ea46315e83c4cd050ccb90936ef0063e35