SECOAUTH-388: apply ClientCredentialsTokenEndpointFilter only if not already authenticated
Allow whitespace padding in private keys
Fix broken integration test

Recent changes to the sparklr sample mean that it is using a vanilla
basic auth entry point for the token endpoint.
SECOAUTH-366: add optional filter for token endpoint
SECOAUTH-366: don't clobber client_id by resetting authorizationParameters
Tidy imports
[maven-release-plugin] prepare release 1.0.2.RELEASE
[maven-release-plugin] prepare for next development iteration
Add JWT support for RSA public key PEM formats.

This makes it possible to create an RsaVerifier with
a PEM encoded public key. Previously it could only be
done with a private key or an ssh-keygen format public
key.
JWT release 1.0.1
Update JWT pom to snapshot version
SECOAUTH-395, SECOAUTH-396: change OSGi metadata for Jackson
SECOAUTH-381: remove password from authorization request

Fixes: User's password gets serialized in authentication column if password grant type is used
Merge branch 'release/1.0.2'
Fix typo in javadocs
Stricter checking for requested redirect_uri.

For a URL, the protocol and host must match and the registered
redirect must be a substring of the requested uri. For a non-URL,
an exact match is required.
SECOAUTH-386: OAuthProviderProcessingFilter should delegate its error handling to an AuthenticationEntryPoint
[gh-68] Allow custom granter to be resolved by XML namespace parser

Fixes org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named ...

see http://stackoverflow.com/questions/15438472/no-bean-named-but-bean-is-defined
SECOAUTH-394: Append scope to implicit response if different than requested
[gh-51]: added flag to DefaultAuthorizationEquestManager to hide valid scopes by default from client