Fix odd logic around new server sessions

Double-check removed, streamlining logic.
Added UTF-8 support for readme and changelog files

Fixed the issue that creates an empty line after each line of HTML code,
which can break the layout by using <pre>

This patch rewritten to avoid reformatting by Dave Cridland <dave@cridland.net>
Merge pull request #57 from surevine/dwd/redeyes-utf8

Added UTF-8 support for readme and changelog files
OF-834: Close Open_redirect

This now reassembles a URL from the path, query, and fragment supplied, and
ignores the scheme and network location portions entirely.

Thus http://www.google.com/foo redirects to /foo only.

Credit to Jonathan Bush, Security Consultant at
ProCheckUp http://www.procheckup.com
More S2S fixes

Kim 'Zash' Alvefur commented that an empty authzid in EXTERNAL wasn't working.

This patch adds this handling, and also changes authorization checks from a
domain.contains() to a domain.equals().
Fix for OF-835:
- install ReadThrottleFilterBuilder into filter chains
- adjust SSLFilter positioning in chain so that ReadThrottleFilter works correctly
Merge pull request #61 from jackrabbit128/master

Fix for OF-835
Merge pull request #59 from surevine/dwd/s2s-external-178

More S2S fixes
Merge pull request #58 from surevine/dwd/OF-834

OF-834: Close Open_redirect
Don't block stanzas send from the service

Fixes OF-724