[#717] Edits based on code review by @iperdomo
* Don't hard code the HTTP verb in ApiAuthenticationFilter
* Trim whitespace when parsing credentials in ApiAuthenticationFilter
* Fail fast when apiUser is not found in ApiAuthenticationProvider and UserRestService
* Don't hard code HTTP verb when building the payload in ApiAuthenticationProvider