Login now uses Spring Security
Security roles sorted alphabetically as specified by UserDetails.getAuthorities()
Liquibase now uses Commons logging