Client side: secret-key (public key). "Authorization auth <username:password> (encrypted)" for LOGIN. "Authorization token <token>" for access
Changed to UTC
Cleaned up
Renamed to AuthGenericFilterBean
Set custom usersByUsernameQuery
delete TokenUtil
use sub as username or userid. Refactored RSA to filter