not forcing user to pass a HttpServletRequest into JAASRolesRule
better syntax to JAASRule
updating docs
removing TODO from readme
Authenticate -> Authentication