Adding CssUrlAuthorizationProcessor post processor

Interactions between multiple processors can 'break' URLs that are known to the ResourceAuthorizationManager. This processor can be put as a post processor following the other processors to 'fix' this.

Contains a basic unit test in core, and another in extensions that demonstrates (and fixes) the negative behaviour of CssUrlRewritingProcessor and Less4jProcessor interacting.