Correct typo in AbstractRememberMeServices assertion
SEC-2335 Added ACL schema files for MySQL, SQL Server, Oracle
SEC-2325 Added JSP tags for CSRF meta tags and form fields
SEC-2325: Polish CSRF Tag support

- Rename csrfField to csrfInput
- Make AbstractCsrfTag package scope
- rename FormFieldTag to CsrfInputTag
- rename MetaTagsTag to CsrfMetaTagsTag
- removed whitespace from tag output so output is
  minimized & improving browser performance
- Update @since
- changed test names to be more meaningful
SEC-2515: Detect object cycle for AuthenticationManager configuration
SEC-2507: WebExpressionVoter.supports support subclasses of FilterInvocation
SEC-2500: Prevent anonymous bind for ActiveDirectoryLdapAuthenticator
SEC-2518: UserDetailsService javadoc repeats "insensitive"

Typo in javadoc, "case insensitive" was repeated twice.
Merge pull request #62 from dalbertom/typo

Correct typo in AbstractRememberMeServices assertion
SEC-2519: RememberMeAuthenticationException supports root cause

Added a constructor which keeps the root cause of the exception, and
added some documentation
SEC-2173: Override toString method in SystemWideSaltSource

Now prints the saltSource string instead of the object memory signature.
SEC-2173: Added SystemWideSaltSource.toString() test
SEC-2173: Polish javadoc
SEC-2177: Striping off all leading schemes

Striping off all leading schemes in the DefaultRedirectStrategy, so it
will be less vulnerable to open redirect phishing attacks. More info can
be found at SEC-2177 JIRA issue.
SEC-2177: Polish
SEC-2531: AuthenticationConfiguration#lazyBean should use BeanClassLoader
SEC-2498: RequestCache allows POST when CSRF is disabled
SEC-2533: Global AuthenticationManagerBuilder disables clearing child credentials
Fix package name in manual code
SEC-2542: Use exclusions to remove duplicate dependencies

A number of projects had duplicate dependencies on their classpaths
as a result of the same classes being available in more than one
artifact, each with different Maven coordinates. Typically this only
affected the tests, but meant that the actual classes that were
loaded was somewhat unpredictable and had the potential to vary
between an IDE and the command line depending on the order in which
the aritfacts appeared on the classpath. This commit adds a number of
exclusions to remove such duplicates.

In addition to the new exclusions, notable other changes are:

 - Spring Data JPA has been updated to 1.4.1. This brings its
   transitive dependency upon spring-data-commons into line with
   Spring LDAP's and prevents both spring-data-commons-core and
   spring-data-commons from being on the classpath
 - All Servlet API dependencies have been updated to use the official
   artifact with all transitive dependencies on unofficial servlet API
   artifacts being excluded.
 - In places, groovy has been replaced with groovy-all. This removes
   some duplicates caused by groovy's transitive dependencies.
 - JUnit has been updated to 4.11 which brings its transitive Hamcrest
   dependency into line with other components.

There appears to be a bug in Gradle which means that some exclusions
applied to an artifact do not work reliably. To work around this
problem it has been necessary to apply some exclusions at the
configuration level

Conflicts:
	samples/messages-jc/pom.xml