Sonar Cleanup / Best Practices

Overall changes (ongoing process) of fixing sonar related issues.  These
are all safe changes.  Descriptions worth reading to see details of why
some things changed.  All to enhance library and speed up processing
overall.

* Loggers - Should be private static final
* Loggers enhanced format - Fixed some missed last time around
* Class level objects - By design java defaults fails to known values
such as null for objects, false for boolean, and 0 for primative numeric
types.  Doing so only results in the jvm doing this twice.  So these are
not necessary at class property level.
* Fix C# test case - Test case mirrors test case previously fixed in
java side.  Specifically, my machine name uses mixed case and expected
result is not mixed case.  To solve issue, simply lower case both sides.
* Use more guava where it cleans up code
* spacing / spelling cleanup / some formatting in shiro
* updated spring security 4 servlet to 3.1.0
* made fields private in test cases
* more work to align tomcat code
* maven demos - don't duplicate groupId