Security related improvements

- blacklist usage of destinations in web.xml
- blacklist some headers like JSESSIONID, SAP_SESSIONID_DT1_100,
MYSAPSSO2
- add additional Abstract Class  SecurityHandler which can be for
additional blacklisted headers

Change-Id: I785673c76b32c5d079882dce4f9d858d4d4c8a56