Fix for #86
Making sure its serializable and deserializable across several JVM executions
Merge branch 'release/1.4.0' into bearer-token-anonymous-access
#87: RestLogoutFilter has to be a javax.servlet.Filter