GEOS-5852 default filter chain does not create HTTP session even with session creation enabled
Security documentation enhancments
Merge branch 'master' of git://github.com/geoserver/geoserver