BROOKLYN-51

If no security properties are set and `--noConsoleSecurity` is not set then `BrooklynLauncher` configures the server to accept unsecured connections from `127.0.0.1` and secured external connections that are authenticated with the user `brooklyn` and a randomly generated password that is logged once. 

The new security filter checks the remote address of the request. I'm assuming that this can't be spoofed.
Yes. Reloading properties after modifying `brooklyn.webconsole.security.provider` will not cause the new provider to be used because `DelegatingSecurityProvider` caches its delegate. It would be fairly straightforward to incorporate this - `DelegatingSecurityProvider` can just check that the classname of its delegate matches the value from the management context's property, and reload if there is a difference.