Merge branch 'master' into develop for the 1.5.4 release
bump version for development
just like PostgreSQL, use a default password in case yml is missing from the environment
https://www.pivotaltracker.com/story/show/66163326 - first, we tighten security on the /oauth/authorize URL by requiring scope=oauth.login so that we identify the login client. second we remove the login.addnew configuration flag. third, we read the addnew flag from a URL parameter called add_new
Relax security until we know what clients are using URLs they are not supposed to use. ie, what clients are passing in source=login to /oauth/authorize
since we have moved the flag, we have to take into account if we should set it or not. in the previous default environment, it would assume default=addnew[true]
We can now add a unit test for addnew: true that should succeed, and one that should fail.
remove references to addnew
Merge branch 'feature/add_new_parameter_from_login_server' into develop
Control the removal of directories from within the project in order to avoid too many PRs for cf-release
Control the removal of directories from within the project in order to avoid too many PRs for cf-release
Remove old tomcat maven plugin, and fix tomcat7 maven plugin use
Remove unnecessary profiles in sample apps
Update the README to reference the tomcat7 plugin
Merge branch 'feature/tomcat7' into develop

Now using tomcat7 in favor of tomcat6 maven plugins
Upgrading to Spring 3.2

Fix YamlServletProfileInitializer tests
Upgrading to Spring 3.2

Update uaa module schema locations and RestTemplate usage
Upgrading to Spring 3.2

Update schema locations and RestTemplate usage
initial rename for mysql complete, will convert into SQL script for ensure correctness on ubuntu
add unit test that checks integrity of table and column names