* Skeleton "Access Denied" page to redirect to for URL based authorisation rules.
* Updated Thymeleaf version to 2.1.1.RELEASE - required for using spring security expressions support (mainly the org.thymeleaf.standard.expression.IStandardExpressionParser interface).

Issue: BMS-114
Reviewer: RebeccaB