Made all derivative child nodes protected and ignore versioninig.
Merge branch 'master-aic' of https://github.com/nikhiltri/fcrepo4 into master-aic
Removed "protected" status from all derivatives; moved XACML definitions to avoid parsing error.
Using own config files derived from auth-* ones.
Merge pull request #7 from scossu/master-aic

CND fixes and servlet container auth