[TASK] Clean up JsonView and JsonViewTest internals

Fix docblock and add array type hint to $configuration argument of
transformValue() and transformObject(); fix language in JsonViewTest
test names.

A tiny, non-functional change to Http\Message is included.

Change-Id: I2f110a01a98806561de692614c9fd9e6652de451
Releases: master, 2.0
[BUGFIX] Routing includes object arguments even though it should not

Route::resolve() considered "__identity" arguments as internal and ignored them,
if they were not part of the respective Route defaults or uriPattern.
This change fixes this by only iterating through sub requests (marked with a "--")

Change-Id: I63d3c302524f832224bf0fdc7a6255cb631d16c8
Fixes: #45463
Releases: master, 2.0
[BUGFIX] Fix security related functional tests

With the fix related to "sessionless authentication"
(I5f86cb7a3a3fff3220d61d705f216e1b1d4f2369) settings have been
adjusted in order to use the testing provider & token only for requests
matching a ControllerObjectName of "TYPO3\Flow\Tests\.*".

This change adjusts the tests accordingly.

Change-Id: I307cd295c43c346f18acc5c1fd2886166c10cbbb
Related: #45282
Resolves: #45953
Releases: master, 2.0
[TASK] Tiny tweaks to security documentation

Some markup fixes to the security chapter.

Change-Id: I81009a7ae8314457f14104bb9287d5d559f35f8d
Releases: master, 2.0
Merge "[TASK] Clean up JsonView and JsonViewTest internals"
Merge "[BUGFIX] Routing includes object arguments even though it should not"