Renamed package and removed old OAuth support

For clarity the original decision was to put CasServerAuthenticationProvider in
the 'spring' package because it had nothing to do with the oauth configuration
of spring, but it is only used for Cas's OAuth support so it belonged in the
oauth package.