Hide logout in main.jsp if not logged in
SEC-2252: Add custom form guide
SEC-2260 - update pom/gradle to use current cas client library
SEC-2257: Remove HttpSecurityBuilder#getAuthenticationManager()

Removed in favor of using shared object.
Remove dockbook-reference from guides
SEC-2269: Fix headers documentation
SEC-2269: Fix headers link
SEC-2269: Fix additional links
SEC-2271: LogoutConfigurer#logoutUrl explains about CSRF
SEC-2269: Fix CSRF link in appendix
SEC-2269: Fix markup for CSRF link
SEC-2274: Add ApplicationContext as HttpSecurity shared object
SEC-2108: Fix typo in ldap section of manual
SEC-2270: Remove duplicate version from guides index
SEC-2139: named-security-filter are all defined and ordered correctly
SEC-2276: Delay saving CsrfToken until token is accessed

This also removed the CsrfToken from the response headers to prevent the
token from being saved. If user's wish to return the CsrfToken in the
response headers, they should use the CsrfToken found on the request.
SEC-2280: Fix SessionFixationConfigurer#changeSessionId Javadoc

The Javadoc for SessionFixationConfigurer#changeSessionId() was copied and pasted from
SessionFixationConfigurer#none() and never updated. It is incorrect. This commit fixes that.
SEC-2103: Change log of no results to debug
SEC-2103: Fix tests to verify debug logging instead of info
SEC-2146: Document AspectJ does not inherit annotations