Added tests for Authentication & AuthenticationPost listeners
Moved MvcAuthEvent construction into Module
AuthorizationInterface

- Created new Authorization subnamespace, and pushed all
  authorization-related classes into it.
- Created new AuthorizationInterface:
  isAuthorized(IdentityInterface, resource, privilege)
- Created AclAuthorization, which extends Acl and implements
  AuthorizationInterface; it also does the logic for adding resources
  that do not exist.
- Modified DefaultAuthorizationListener to accept an
  AuthorizationInterface to the constructor, and it now returns the
  value of isAuthorized().
- Created an AclAuthorization service factory, based on parts that were
  originally in the DefaultAuthorizationListener, for instantiating the
  AclAuthorization. This service is aliased to "authorization" and
  "ZF\MvcAuth\Authorization\AuthorizationInterface"
- Modified the DefaultAuthorizationListener to fetch the
  AuthorizationInterface service instead of creating the ACL instance
  itself.
Move resource string building to new listener

- Added new property, resource, on MvcAuthEvent; null by default, but
  mutable.
- Created new listener, DefaultResourceResolverListener, which handles
  the creation of the resource string based on the matched controller
  and other request criteria; this listener injects the resource string
  into the MvcAuthEvent.
  - Created a service factory for this listener.
  - Added the factory to the module configuration.
  - Registered the listener at high priority on the authorization event.
- Removed resource string building from DefaultAuthorizationListener,
  which allowed removing the rest service munging from the service
  factory.
CS fixes

- Trailing spaces
Provide "deny_by_default" flag

- When present, the ACL becomes a blacklist instead of a whitelist.
Added "authorized" flag to MvcAuthEvent
Return early from DefaultAuthorizationListener if isAuthorized

- In testing, discovered an edge case in AclAuthorization; do not pass
  null values as resources.
Created default Unauthenticated/Unauthorized listeners

- Each tests the MvcAuthEvent to see the status of the respective
  action, and then determines whether to return a response.
- Each are registered with the associated ".post" event at default priority.
[#6][#7] Resolved test issues

- Resolved test issues introduced by merging the two branches together.
Refactor for consistency

- Moved Authentication listeners into an Authentication subnamespace, to mirror
  Authorization.
- Renamed "UnauthenticatedListener" to "DefaultAuthenticationPostListener"
- Renamed "UnauthorizedListener" to "DefaultAuthorizationPostListener"
Refactor MvcRouteListener

- Inject all dependencies, including event manager, authentication
- Make it be a ListenerAggregate, and attach to the event manager during
  initialization.
- Add result callbacks to each trigger() event to ensure we return as
  early as possible.
- Create AuthenticatedIdentity instances when we have an authenticated
  result, or an identity in the authenticated result.
Split service creation into factory

- Moved creation of HttpAuth adapter into a factory for the
  DefaultAuthenticationListener; if created, it is then injected into
  the listener.
- Updated tests for DefaultAuthenticationListener, and created tests for
  its factory.
- Return an identity from the listener; the routine that triggers the
  authentication will short-circuit on this, and inject it into the
  MvcAuthEvent.
CS fixes

- Trailing whitespace
Merge branch 'feature/6and7'

Unified merge of PRs 6 and 7, completing authentiation and authorization events.

Close #6
Close #7