add AuthenticationFilter for REST access
Update README.md
Rename ClientAuthenticationFilter in RequiresAuthenticationFilter
Update UserUtils to set and get profile in request if stateless
update readme