SEC-2328: Add hasAnyRole to ExpressionUrlAuthorizationConfiguration
SEC-2339: Added Logical (Or, And, Negated) RequestMatchers
SEC-2307: JavaConfig RequestCache ignores favicon.ico
SEC-2341: Update to Gradle 1.8

Some dependencies were necessary to update due to issues with JUnit
integration.
SEC-2302: Provide beforeSpringSecurityFilterChain hook

This allows inserting filters before the springSecurityFilterChain.
SEC-2309: Document CSRF multipart/form-data
SEC-2282: Polish CSRF Documentation
SEC-2282: Polish CSRF Documentation
SEC-2336: WebSecurityConfigurerAdapter#registerAuthentication javadoc fixes
SEC-2243: Remove additional Debug Filter
SEC-2322: Support StandardReflectionParameterNameDiscoverer
SEC-2151: Support binding method arguments with Annotations

This allow utilizing method arguments for method access control on
interfaces prior to JDK 8.
SEC-2151: Fix tests
SEC-2151: AnnotationParameterNameDiscoverer support single annotated param

This makes sense since often times only a single argument is necessary in
the expression.
SEC-2151: Fix spring4Test
SEC-2305: GlobalMethodSecurityConfiguration autowire PermissionEvaluator

If a single PermissionEvaluator bean is found the
DefaultMethodSecurityExpressionHandler is configured with the
PermissionEvaluator. If multiple PermissionEvaluator beans are found, the
beans are ignored.
SEC-2282: Polish CSRF Documentation

Explain why (passivity) XML Namespace doesn't enable csrf protection by
default.
SEC-2285: Polish Security Headers Documentation

Explain why (passivity) XML Namespace doesn't enable security headers by
default.
SEC-2331: Include Expires: 0 in security headers documentation
SEC-2285: Headers doc explicitly state default headers