adding the EVERYONE principal to every Session based on ServletCredentials (in Auth provider)
added security support for anonymous REST clients
added integration tests for allow and deny of basic fedora object and datastream operations
stubbed a basic PEP that makes decision on the basis of node naming
included fcrepo-serialization packaging in rest component scan