Explicit autoLoginFail & autoLoginSuccess methods 

This would allow more flexibility.

TokenBasedRememberMeServices.processAutoLoginCookie() is now final hence there is no way to act on successfull nor failed autoLogin() when extending this class.

I have a use case where I want to remove the rememberme cookie when the authentication fails & there is no "clean" way to do this.

Other use cases exist, such as: sending an email or trigger any other monitoring process.