Java: better logic for checking wildcard subdomain

this is improvement from #119

sample snippet of proxy.config
```
<ProxyConfig mustMatch="true" 
				logFile="c:/test/auth_proxy.log"
				logLevel="INFO"
				allowedReferers="*.esri.com,maps.*.com,192.168.0.*,erwin.arcgis.com">
```

This includes,
- better handle subdomain attacked found by mehul, referer http://test.esri.com.arcgis.com will NOT get proxied for allowedreferer="http://*.esri.com"
- the allowed referers value must be in the format of "aaa.bbb.com", don't include http or https in front
- the referer that coming in must be valid url (which will if it is coming from application), be careful when testing via fiddler, it must be somehting like "http://foo.esri.com/questions/2343/show.php" or simply "http://www.esri.com"
- for allowedreferer value of "*.esri.com", it will allow requests with referer, "http://foo.esri.com" ,"http://foo.maps.esri.com", "http://esri.com", "http://www.esri.com", regardless of http or https
-  IP address would work, for allowedreferer value of "192.168.0.*", it will allow requests with referer, "http://192.168.0.123" and so on
- for allowedreferer value of "maps.*.com", it will allow requests from "http://maps.aaa.com", but NOT from "http://maps.aaa.bbb.com"

I think I covered most of the cases, let me know if I am missing something @MehulChoksey @bsvensson @jgravois @kellyhutchins