[105536] Fix path rules order (again)

The order in which the Spring Security path rules are applied matters. This
order is defined by the order in the XML-- now imported correctly.
[105536] most /oauth/clients/tx endpoints

This implements all of the tx endpoints that we have test coverage for
from UAA