Merge pull request #3 from epierce/develop

Release version 0.2
Implements a keystore mechanism.

This commit implements a system whereby a keystore is used to decrypt
incoming authentication tokens. This removes the situation where the
server key could be compromised, thus require all services to change
their encrypting key. With this system in place each service has its
own encrypting key.
Merge branch 'json-keystore' of git://github.com/jsumners/cas-server-extension-token into develop

* 'json-keystore' of git://github.com/jsumners/cas-server-extension-token:
  Implements a keystore mechanism.
Updated module version
Fixes a JSONKeystore bug.

This commit fixes a bug whereby an instance of JSONKeystore created with
the null constructor would not update its in-memory store after a
keystore file was attached (e.g. when using Spring beans). An extra
bit of debug logging was also added.
Removes the unnecessary `encryptionKey` property.

The `encryptionKey` on TokenAuthenticationHandler is no longer
necessary. The key is automatically looked up via the token_service
parameter.
Cleans up documentation and fixes a bug.

This commit simplifies the example in the documenation. It also fixes
a bug that would prevent a valid authentication from succeeding due to
a verification against an invalid "embedded key". I'm not entirely happy
with the final check for a valid token (by simply checking the username)
but it will do.
Adds a CLI tool to create an encrypted token.

This commit adds a simple tool that can be used to craft an encrypted
token for test purposes. It also includes a class that can be used
independent of the CLI tool for encrypting and decrypting strings (could
be useful in a REST interface).
Merge pull request #6 from jsumners/json-keystore

JSON Keystore fixes
Standardize request parameter names

Standardized use of static strings to define the HTTP request parameter
names.
Remove use of 'api_key'

The 'api_key' field is no longer used for identifing which encryption
key should be used, so it does not server any purpose in the token.
Minor code cleanup in the AuthHandler