Correct typo in AbstractRememberMeServices assertion
Add ExpressionUrlAuthorizationCOnfigurer tests

- Demo custom expression root
- Demo @Bean in expression example
SEC-2467: Fix Small errors in itest-web's jsps
SEC-2466: CSRF MutipartFilter doc now uses <url-pattern>
SEC-2466: Add link to MultipartFilter in CSRF multipart section
SEC-2463: CSRF documentation includes EnableWebMvcSecurity
SEC-2455: form-login@login-processing-url & logout@logout-url use matchers

Remove the deprecation warnings of using setFilterProcessingUrl by invoking
the matcher methods instead.
SEC-2473: Update to Spring 3.2.7
SEC-2474: Update tests against Spring 4.0.1
SEC-2474: Update poms
SEC-2461: Multi WebSecurityConfiguration does not create null springSecurityFilterChain
loginProcessing test
SEC-2447: Fix AuthenticationManagerBuilder ordering issues
Minor slapd config changes
SEC-2469: Support Spring LDAP 2.0.1+
SEC-2479: Search parent context for AuthenticationManager
SEC-2392: KeyBasedPersistenceTokenService uses bytes instead of bits

The method setPseudoRandomNumberBits actually sets the number of bytes. This
commit deprecates setPseudoRandomNumberBits and adds
setPseudoRandomNumberBytes. The default value is still 256 to remain passive
but will be updated in 4.x.
SEC-2490: LdapAuthenticationProviderConfigurer allows custom LdapAuthoritiesPopulator
SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials
SEC-2468: Fix tests