Make introspection endpoint access authorization pluggable.
renamed auth request variable
added CSRF protection to approval page
moved CSRF generator to request parser instead of confirmation controller
[maven-release-plugin] prepare release mitreid-connect-1.1.5
[maven-release-plugin] prepare for next development iteration
externalized application CSS, closes #221

added favicon, cleaned up header and footer code
added null check and permissions check to ID token generation, closes #602
fix dynamic registration of public clients
enforce clients using a redirect flow have at least one redirect uri registered when using dynamic registration, made error handling more consistent across all APIs

closes #596
more reasonable check for whether or not a user auth is present, addresses #602
Appropriately catch runtime exceptions in all guava caches, closes #603
added system wide cache for all symmetric validators, closes # 557
added service to optionally check "target_uri" links, closes #547
Added Signed JWT support to UserInfo endpoint response, closes #593
added support for encrypted and symmetrically signed id tokens and user info responses
cleaned up UI for client editing
added support for default max auth age and require auth time, made prompt filter only work on authorization endpoint
cleaned up UI components for client creation (fixed defaults and loading)
fixed prompt filter coding error