Move core security filters from restlet1x plugin to nexus-web-utils
drop unused test muck