deleted unused files
no need to have dependencies on these two Spring Security jars, they're transitive dependencies of spring-security-core
cleanup, converted to @CompileStatic where possible, except DefaultFacebookAuthDao which has a lot of dynamic code
bug fix - the core plugin has to load first, otherwise changes in other plugins (e.g. filter and provider registrations) can be reset
moved throwing the UserNotFoundException into its own method to make it easier to override in a subclass; I'm implementing a custom integration where I need access to the FacebookAuthToken, so I store it in the HTTP session before throwing the exception
Merge pull request #74 from burtbeckwith/core2

cleanup, a fix, and a small new feature