SEC-2087: GlobalMethodSecurityBeanDefinitionParser uses AuthenticationManager to create AuthenticationManagerDelegator
SEC-2147: Deprecate .encoding.PasswordEncoding
SEC-2133: Update doc from ChannelAuthenticationFilter to ChannelProcessingFilter
SEC-2162: ApacheDSContainer throws RuntimeException on failure to start
SEC-2161: <ldap-server> creates unique dir for embedded LDAP
Remove ApacheDSContainerTests successfulStartupAndShutdown since it was commented out
SEC-2122: Change doc to prioritize bcrypt use
SEC-2122: Update samples to use bcrypt.

Data sources modified to store bcrypt hashes and configs now
use BCryptPassworEncoder.
SEC-2122: Update namespace to support bcrypt.

password-encoder now supports hash='bcrypt'.
SEC-1785: Remove auto-config from manual.

Changed the namespace doc to use an explicit form-login
and logout element and avoid mention of auto-config or its
effects. This makes the intro shorter and simpler.
SEC-2122: Fix broken integration tests.

Modified BCryptPasswordEncoder to no longer throw an
IllegalArgumentException when the encoded password is empty or
the incorrect format for bcrypt. Instead it now logs a warning
that non bcrypt data was found.

The Dms integration tests were failing after being changed to
use bcrypt and this fixes the issue.
SEC-2002: Added events to notify of session ID change

Session fixation protection, whether by clean new session or
migrated session, now publishes an event when a session is
migrated or its ID is changed. This enables application developers
to keep track of the session ID of a particular authentication
from the time the authentication is successful until the time
of logout. Previously this was not possible since session
migration changed the session ID and there was no way to
reliably detect that.

Revised changes per Rob Winch's suggestions.
SEC-2002: Polishing
SEC-2175: Correct XSD docs on auto-config.
SEC-1953: Spring Security Java Config support

This is the initial migration of Spring Security Java Config from the
external project at
https://github.com/SpringSource/spring-security-javaconfig
SEC-1953: Polish bundlor warnings
SEC-1953: Polish
#138 Tests for WebSecurityExpressionHandler bean existing
#138 WebInvocationPrivilegeEvaluator has default value
#137 WebSecurityConfigurerAdapter no longer uses getClass() for logger

Previously it was difficult to change log levels due to CGLIB proxying of
the class which impacted the logger name.