updated to spring 4, spring security 3.2, and secoauth 2.0 (RC)
Merge origin/spring-upgrade
Nonce usage is now configurable in ServerConfiguration.