add local-users permission policy
add optional authentication method parameter to AccessDeniedException
provide current user to FTL templates via "subject" or "user" variables
support authentication in @Controller
authorization exception should immediately cause a FORBIDDEN (403) response
support Freemarker error handling
delete bad bytecode caches
fix method interception - return value not return properly
improved security handling - securing handlers is now done by the request plan, hence applicable to all handler types