Add "inferOptionalPackagesFromDependencies" configuration for maven-bundle-plugin (set to "false")
This flag is a patch I sent to Apache to allow controlling the behavior of automatically using "resolution: optional" for packages that come from optional dependencies.

See https://issues.apache.org/jira/browse/FELIX-4372 for details.
Set some dependencies as optional (those we don't want to reach consumers of the modules)
Relies on the maven bundle plugin patch we used for parent module
Refactoring of web module
Especially the authentication/authorization