SEC-2328: Add hasAnyRole to ExpressionUrlAuthorizationConfiguration
SEC-2339: Added Logical (Or, And, Negated) RequestMatchers
SEC-2307: JavaConfig RequestCache ignores favicon.ico