Remove remember-me from security module (left for client of the module)
add getAnonymousSubject() to Security service
refactor of modules module (some law & order..)
web security TODOs
WebRequest now provides the matching security constraint
security constraint now declares its authentication method (singular)
remove unneeded cast & import
add request authentication