pulled client key publication into its own class to help deal with bean processors
made default scopes in client a bit more sensible
updated spring version
spring beans explicit version tag
updated request object forwarding hack
deleted duplicate login button, addresses #276
refactored signing and validation, added jwk-based cache, removed keyfetcher, refactored client side class structure
refactored signing and validation, added jwk-based cache, removed keyfetcher, refactored client side class structure
import cleanup
switched jwk view to use nimubs
added signature checking to request objects