CAS-1207 Add maven enforcer rule to prevent banned cglib artifacts.
CAS-1248: Cleaned up the way attributes were collected into the hashmap.
CAS-1251: Move the JsonExceptionView resolver to the management webapp

Addressed issues raised by Scott. Fixed the import location, used a direct "return null" instead of a stale variable and removed the message key constant.
Merge branch 'master' into CAS-1251

Conflicts:
	cas-server-webapp/pom.xml
CAS-1253 Avoid duplicate joda-time dependencies.

Duplicate joda-time dependencies may arise in overlays that include cas-server-support-ldap. Declare direct depencency on joda-time for core and cas-server-support-ldap and exclude from transitive dependencies to ensure single consistent version.
Merge pull request #195 from serac/cas-1253

CAS-1253 Avoid duplicate joda-time dependencies.
CAS-1248: CASImpl ignores authentication attributes when registered service is set to ignore attribute release policy of svc registry

Added missing final keyword.
CAS-1188 : Make SAML support as an optional module for CAS server
organize imports, clean dependencies and add SAML views to cas-server-webapp
Merge pull request #192 from Unicon/CAS-1248

CAS-1248: CASImpl ignores authentication attributes when registered
CAS-1251: Move the JsonExceptionView resolver to the management webapp

Fixed exclusions tag issue with pom that had made its way into the commit via a malformed merge with master.
Added an empty line after the import statements in ajax exc resolver class.
CAS-1238 New AH interface for LPPE generalization and clear error handling.

A new AuthenticationHandler component in the root authentication package
provides a number of notable features consistent with long-term goals:

1. Provides rich metadata (HandlerResult) on success that may be used by
   higher level components. For example, a JDBC AH might express a password
   expiration condition by setting getWarnings() that may be leveraged
   by LPPE components.
2. Clarifies error handling contract to distinguish between an
   authentication failure (GeneralSecurityException) and a situation
   where authentication was prevented (PreventedException). The rich
   vocabulary of the GeneralSecurityException hierarchy allows a natural
   mapping from common failure modes (e.g. password expiration) onto
   concrete exception classes.
3. Package structure allows both old and new AH components to coexist,
   providing a transition path for existing CAS adopters to gradually
   migrate custom authentication handlers to the new API.
   The LegacyAuthenticationHandlerAdapter component provides an out-of-box
   transition strategy.
Merge pull request #191 from Unicon/CAS-1251

CAS-1251: Move the JsonExceptionView resolver to the management webapp
CAS-1259 Report ERROR status when Monitor throws unchecked exception.
CAS-1251: Possible Cross-Site Scripting on /login using execution parameter

Follow-up work on the previous commit around CAS-1251, this commit generalizes NoSuchFlowExecutionExceptionResolver to handle FlowExecutionRepositoryException is a common ancestor to webflow exceptions. Hiding these exceptions, such as BadlyFormattedFlowExecutionKeyException, would allow us to present the error page to the user as opposed to having the error rendered directly on the page which may include JS code passed to the /login CAS URI.

The HTMLEscaped handler is now removed, since it was originally intended for the webapp and not the management webapp.
Merge pull request #198 from serac/cas-1259

CAS-1259 Report ERROR status when Monitor throws unchecked exception.
CAS-1251: Possible Cross-Site Scripting on /login using execution parameter

Fixed tests
Merge pull request #199 from Unicon/CAS-1251-1

CAS-1251: Possible Cross-Site Scripting on /login using execution parameter
CAS-1251: Possible Cross-Site Scripting on /login using execution parameter

Fixed an issue with the webflow exception resolver to also ignore badly formatted key exception, since it will result in an infinite redirect loop.
Merge pull request #200 from Unicon/CAS-1251-1

CAS-1251: Possible Cross-Site Scripting on /login using execution parameter