Remve obsolete method, use security annotation instead.
Do not check permission within method, use security system.
Refactoring of controller tests

Created AbstractControllerTest as base class of all controller tests.
It provides a method to simulate logged in user and clean user login
after each test run.
Removed obsolete xml configuration
Wire up FeebackStorage as Spring bean
Cutting dependency between FeedbackController and UserService
Fixed StubUserService to act the same way as UserService

Trying to call UserService.getCurrentUser() will end up in HTTP 401 error
by throwing UnauthorizedException.
Merge branch 'master'
Set UserSessionService user if User object
Merge branch 'upstream'
Add previously removed authentication check
Merge branch 'upstream'
Extract ExceptionHandlers into controller advice
Some changes to security implementation

Set default evaluation result to false and throw an AccessDeniedException.
SecurityExceptionControllerAdvice checks if there is an valid login and
decides whether to send HTTP 401 or HTTP 403.
Only set role to valid user.

Login mechanism needs redesign prior state handling.
Merge branch 'upstream'
Added java based security configuration

This java based configuration should be used for dynamic authentication
method setup.
Removed config file from master branch
Merge branch 'upstream'
Merge remote-tracking branch 'pcv/master' into integration