This compensates for Grizzly's missing http auth via a servlet filter.

https://www.pivotaltracker.com/story/show/58003404

The test filter proxies the request, adding methods needed for authN, simulating container auth.
All BASIC login attempts will pass with test filter configured
The fedoraAdmin container role is assigned to any user named "fedoraAdmin"
New filter is configured in web.xml for http-api and auth-commons.
OAuth project has a similar filter that was tweaked to support more auth methods in a basic way.
OAuth project now configured to use the bypass security authentication provider for ITs

Fedora PEP interface for filtering searches was refactored around iterators instead of sets.

JAX-RS security contexts were stripped out of the ModeShape login chain, keeping login
at the container level. This also means that login can be based on Modeshape's standard
ServletCredentials object.

Made some changes to FedoraUserSecurityContext and FedoraAdminSecurityContext to better support ModeShape logout.

Renamed a constant representing the fedora user role, resulting in some one-line changes in other places