feat(engine-rest): allow servlet path prefix param for auth filter

- fixes issues when the jax-rs application is not deployed as a servlet,
but only via a filter as can be the case for resteasy

related to CAM-822
Merge branch 'master' of github.com:camunda/camunda-bpm-platform