entitlements scheme proposal

add EntitlementsTest
record entitlement context for REST web requests, and log more info of web requests
add AcmeEntitlementManagerTest
add isEntitled check to ApplicationResource and EntityResource
add unauthorized to WebResourceUtils
add FROM_ENTITY function to EntityTransformer
add EntitlementPredicates
always use `@BeforeMethod(alwaysRun=true)` - if someone later makes one of the tests in this class an Integration test (e.g. because it takes a few seconds) then it would fail in mvn because init wouldn't be called, but it would pass in Eclipse IDE!