SEC-2221: Add MediaTypeRequestMatcher
SEC-2198: http.httpBasic() defaults AuthenticationEntryPoint
SEC-2199: Support multiple AuthenticationEntryPoint defaults
SEC-2156: AbstractSecurityWebApplicationInitializer configures SessionTrackingMode

It also allows customization by overriding a method.