Security refactoring to support servlet use cases.
Initial support for session based authentication
Add support for form based authentication
Add support for * pseudo role
Extract SecurityContext into an interface