Initial commit of new lookup manager
Added a toString() method to DuoCredentials
Switch the order that the flow/request scopes are checked for the TGT

The initial version checked the flowScope, then the requestScope for
the TGTid.  This caused a problem because when a user re-authenticates,
they have TGTids in both scopes: the new TGT in the request and the old
one in the flow.
Increase version for hot fix
Merge branch 'master' into feature/attribute-lookup-manager

* master:
  Increase version for hot fix
  Switch the order that the flow/request scopes are checked for the TGT
  Added a toString() method to DuoCredentials

Conflicts:
	pom.xml
Pass the principal object instead of only the username

Having the entire principal available to the multi-factor classes gives
us the flexibility to check for specific values in the user’s
attributes when determining MFA requirements
Move JsonServiceMultiFactorLookupManager to a USF package
Update Tests
Change interfaces to require Principals instead of Strings
Start adding support for checking user attributes
Removed StatsD
Added Groovy support
Change name of the JsonServiceMultiFactorLookupManager
Added Duo requirement based on user attributes

Added a validator interface for checking attribute maps and a default
implementation
ignore case of the attribute values
Make attribute validation case-insensitive
Add AttributeUserMultiFactorLookupManager

uses attributes from the user principal to make the determination.  MFA
will be required for ALL services.
Simplify variable names

Renamed variables for multiFactor attributes to make the configuration
more clear
Update sample XML config
Fixed location of login-webflow.xml