BROOKLYN-51

If no security properties are set and `--noConsoleSecurity` is not set then `BrooklynLauncher` configures the server to accept unsecured connections from `127.0.0.1` and secured external connections that are authenticated with the user `brooklyn` and a randomly generated password that is logged once. 

The new security filter checks the remote address of the request. I'm assuming that this can't be spoofed.
I wonder if this should be a `sysout`, as well as a log. If a `sysout`, it should probably be done by the caller so passing in the user+password. No particularly strong feelings.

Wording would perhaps be improved if said `"or with auto-generated username and password {}:{}"`.