prevent logout from being called before the user is authenticated
removed HttpServletRequest request from spring subject,
HttpServletRequest request 

dependency injection is used
change capsecurity manager and delegate login method, from
login(request) to 

login(username, password)
subject delegate delegates to create session, authenticate and create
subject dto

rename setSubjectDto to createSubjectDto
refactor login in springSubject
readme is moved from client to service