Fix odd logic around new server sessions

Double-check removed, streamlining logic.
Added UTF-8 support for readme and changelog files

Fixed the issue that creates an empty line after each line of HTML code,
which can break the layout by using <pre>

This patch rewritten to avoid reformatting by Dave Cridland <dave@cridland.net>
Merge pull request #57 from surevine/dwd/redeyes-utf8

Added UTF-8 support for readme and changelog files
OF-834: Close Open_redirect

This now reassembles a URL from the path, query, and fragment supplied, and
ignores the scheme and network location portions entirely.

Thus http://www.google.com/foo redirects to /foo only.

Credit to Jonathan Bush, Security Consultant at
ProCheckUp http://www.procheckup.com
More S2S fixes

Kim 'Zash' Alvefur commented that an empty authzid in EXTERNAL wasn't working.

This patch adds this handling, and also changes authorization checks from a
domain.contains() to a domain.equals().
Allow for custom lib and conf file placement.
Add the custom lib directory as compile time dependency.
Fix for OF-835:
- install ReadThrottleFilterBuilder into filter chains
- adjust SSLFilter positioning in chain so that ReadThrottleFilter works correctly
Merge pull request #61 from jackrabbit128/master

Fix for OF-835
Merge pull request #59 from surevine/dwd/s2s-external-178

More S2S fixes
Merge pull request #58 from surevine/dwd/OF-834

OF-834: Close Open_redirect
In setup, some of the host settings are loaded from XML properties specified in openfire.xml, while others are incorrectly loaded from whats currently in JiveGlobals. Since we are in setup mode, JiveGlobals.getProperty returns null thereby ignoring any property overrides in openfire.xml specified by the user.

Changelog: 
1. Instead of just blindly setting anonymous auth to true, check if user has an override property in XML configuration, if not, default to true.
2. Call getXMLProperty to load user configuration override values and not what is currently in JiveGlobals. During setup mode, this is always null.
3. Instead of setting default values for auth, user, group, card, lockout, securityAudit and admin class names, check if the user has provided overrides for those properties, and if so, use those, otherwise use defaults.
4. Expose a method to retrieve XML property names, and then in finishSetup, go through the rest of the XML properties overridden by user that were not touched by setup and individually set those. This is particularly useful when users have to specify primary and secondary * hybrid providers.
Switch from using Collections.EMPTY_LIST to emptyList.
Update to 0.2.1
- Creation and modification dates, are now optional
- Room user roles, are now optional
- Bug fix: As persistent specified room, will be now saved to DB
Merge pull request #62 from Redor/master

MUC Service Plugin update to 0.2.1
Merge pull request #65 from sdebnath/setup-props

Bug: properties in openfire.xml not properly loaded in setup
Merge pull request #64 from sdebnath/custom-fix

Allow for custom lib and conf file placement. Jira OF-838