Explicitly manager javassist version

Hibernate is picky about javassist, but unfortunately that
library is used by other parts of our stack (Thymeleaf!?), so
we need a policy for resolving the dependency transitively.
I fixed it to the version in Hibernate 4.3.1 (our current
best foot forward), but it will have to be updateed whenever
Hibernate is.

Fixes gh-402
Make Spring Boot tests locale independent

Fixes gh-405
Add @Configuration to WebMvcAutoConfigurationAdapter
Expose setter for Map store in InMemoryMetricRepository

User can then use a weak reference map (for instance), if worried
about memory usage.
Spring Data Rest Starter Project

Fixes gh-60
Add spring-data-rest sample
Be defensive if there is no main/classes
Add docs for starter pom usage
Add UTF-8 declarations to starter parent

Fixes gh-411
Add sample web.xml for error mapping
Fix typos in JSP docs
Add ErrorWrapperEmbeddedServletContainerFactory for error pages in WARs

Error pages are a feature of the servlet spec but there is no Java API for
registering them in the spec. This filter works around that by accepting error page
registrations from Spring Boot's EmbeddedServletContainerCustomizer (any beans
of that type in the context will be applied to this container).

In addition the ErrorController interface was enhanced to provide callers
the option to suppress logging.

Fixes gh-410
Update to Spring Security 3.2.1

Also change strategy for defaulting of Authentication. Spring
Boot authentication defaults are now encapsulated and can easily
be overridden by a user defined AuthenticationManager.
Fix tests

Some assumptions were being made in tests, e.g. about
there being an AuthenticationManager @Bean, which were
false with the new Security 3.2.1 updates from Rob.

Also parent-child contexts with the actuator were
problematic because they didn't exclude the web configuration
for the management security in the parent context.

Fixes gh-244
Add method security web sample

Useful sample for common use case where user adds custom Authentication,
a form login, *and* global method security all the the same application.
Add actuator to method security sample
Be defensive with auto-config of Servlet 3.0 features

There's no explicit support for older Servlet specs in Spring Boot,
but we can at least make it easy for others to provide such
support by not adding stuff to the context when in an older container.
Polish
Drop getPort from ConfEmbServletContainerFactory

Remove getPort() from ConfigurableEmbeddedServletContainerFactory to
keep the interface primarily setters.
Tweak ConfigurableEmbeddedServletContainerFactory

Update ConfigurableEmbeddedServletContainerFactory to no longer directly
extend EmbeddedServletContainerFactory.