Simplify how servlet-based plugin modules are defined wrt to common dependencies
requireBinding of deps instead of binding
add SecurityFilter to deal with installing components and install MDC attributes.
move impl detail components to internal.*