Added dynamic reload of the web matchers on reset() of app context.
Changed WebService to abstract.
Code refactoring.
Refactored request authentication to be slightly less mandatory.
Also fixed an issue with invalidated sessions potentially lingering on disk.