SEC-2189: Modifed the AbstractAuthorizeTag#authorizeUsingUrlCheck

When make an authorization decision based on the URL and HTTP method attributes,
if multiple WebInvocationPrivilegeEvaluator are defined,
was modified as call the isAllowed() of all WebInvocationPrivilegeEvaluator.

Please review because i was fix this issue.
If there are not problem, please merge to master branch.