Start Spring Security 4.0.x
Update min Spring version of 4.0.2.REELASE
Fix spring4 test
SEC-2495: CSRF disables logout on GET
SEC-2506: Remove Bundlor Support
Fix move to 4.0
Fix integration tests
Update Spring Security version in pom.xml
SEC-2499: Allow MethodSecurityExpressionHandler in parent context

Previously a NoSuchBeanDefintionException was thrown when the
MethodSecurityExpressionHandler was defined in the parent context. This
happened due to trying to work around ordering issues related to SEC-2136

This commit resolves this by not marking the
MethodSecurityExpressionHandler bean as lazy unless it exists.
SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header.

The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.
SEC-2511: Remove double ALLOW-FROM in X-Frame-Options header
SEC-2512: Fix typo in reference`

udates -> updates
SEC-2513: Add link to SpringSource CLA form
SEC-2514: Fix typo in hellomvc.asc

packags -> packages
SEC-1932 Added PBKDF2PasswordEncoder.

 - Also moved some logic into a new class, AbstractPasswordEncoder. Both PBKDF2PasswordEncoder and the now-simplified StandardPasswordEncoder extend AbstractPasswordEncoder.
 - Added tests for PBKDF2PasswordEncoder .