SEC-2424: Document ObjectPostProcessor
SEC-2418: Minor fix to toString method in LdapUserDetailsImpl
SEC-2423: Document differences between defaults in Java & XML Config
SEC-2421: Remove filterProcessUrl from UsernamePasswordAuthenticationFilter doc
SEC-2426: Add CSRF and logout with non-post example
Polish CSRF log in caveat with link
SEC-2377: Hhandle EnableWebSecurity in both child & parent ApplicationContext
SEC-2377: Fix tests
SEC-2388: Deploy spring-security-samples-messages-jc
SEC-1932 Added PBKDF2PasswordEncoder.

 - Also moved some logic into a new class, AbstractPasswordEncoder. Both PBKDF2PasswordEncoder and the now-simplified StandardPasswordEncoder extend AbstractPasswordEncoder.
 - Added tests for PBKDF2PasswordEncoder .