removed old webapp artifacts
refactored role lookup for paths to provider class
added test config resources
initial abstraction of some role-based PEP functions
renamed BasicRolesPEP to BasicRolesJavaPEP - to clarify that permissions are determined in custom code.
added beginnings of XACML PEP and PDP