Use proper Jersey aborts instead of Shiro Exceptions

The Shiro exceptions will not return the proper HTTP statuscode, but will instead return a 500 Internal Server Error.

  * Replace UnauthorizedException and ForbiddenException with Jersey aborts.
Include sources and JavaDoc in Jar

This is an open source project. No reason to withhold sources.

  * Adds POM settings to include sources and JavaDoc into jar.
Merge remote-tracking branch 'origin/master'