deprecate HttpSessionSecurityCookieFilter

This fixes #484

HttpSessionSecurityCookieFilter duplicates the JSESSIONID in another cookie, one that can't be marked 'Htt
pOnly'. That means in an XSS attack the attacker could read the JSESSIONID and hijack the session.

Instead we should use RandomSecurityCookieFilter which doesn't have this issue (since it doesn't duplicate the JSESSIONID).
remove extra whitespace

Removing trailing whitespace that broke the build.
Remove link to non-existent demo
Merge pull request #486 from bradcupit/master

deprecate HttpSessionSecurityCookieFilter
De/Serializing null/empty should result to null
Merge pull request #498 from ArcBees/cv_no_content_serialization_null

De/Serializing null/empty should result to null
decode embedded paramaters of RouteTokenFormatter
Merge pull request #496 from realityforge/patch-1

Remove link to non-existent demo
Add tests for Route Token Formatter url unsafe parameters
Merge pull request #499 from rdwallis/rtffix

decode embedded paramaters of RouteTokenFormatter
#489 and #492 : Adding .without to PlaceRequest.Builder and fixed shared parameters map
Fixed checkstyle
Removed diamond
Merge pull request #502 from ArcBees/mmc_placeRequestBuilder

#489 and #492 : Adding .without() to PlaceRequest.Builder and fixed shared parameters map
Add log message when uiHandlers is null
spacing
spacing
#507 : Add failing test
#507 : Now redirect to current page when logged in
#507 : Set the header menu to the correct value when logging in