update to fix with new geoserver-manager version
Revert the change made during issue #154 and add tests that demonstrate that the filtering works.

Make the default behaviour to always remove the sec-username and sec-roles headers.

fixes #633
Merge pull request #643 from jesseeichar/issue633

Fix for Issue #633