DDF-551 Added logging; added the incoming handler as a source in the request for later decision making.
DDF-551 Added X509 delegation handler, updated STS configuration to include the handler.
DDF-108 Added CRL interceptor for STS.
Also removed STS app and cleaned up STS to not be a fragment.
DDF-551 Added realm support to policies and handlers.
DDF-551 Much refactoring, bst for username password tokens.

Some reformatting (difference in formatters).
Updated CAS to use base authentication token, adjusted handler accordingly.
Removed merge conflict comments.
LoginFilter updated to handle the newer tokens.
Updated logging.
Updated AnonymousHandler to use the new username password token.
Added in the new token classes (BaseAuthenticationToken and its sublcasses).
Added numerous tests.
Updated Basic handler to use the new bst username password token.
Updated PKIHandler to use the new base class.
Updated the SAML handler to use the new base class.
DDF-551 Added new files that were left out of last commit.

Test resource files, UPBSTValidator and its blueprint file and pom files.
DDF-551 Fixed issue with merge (missing import in PKIHandler).
DDF-551 Handful of small changes to allow working authentication using the new BST.

Added method to base token class to return XML version of credentials.
Added implementation-specific methods to override xml version in each subclass.
Added delegation handler for the BST tokens.
Updated the LDAP login realm to be 'ddf' rather than 'karaf'.
Updated STSRealm to be aware of the base token class - retrieving the XML version of credentials rather than blinding grabbing them - not assuming all credentials are XML.
Updated the STSCredentialsMatcher class to convert credentials to XML before comparing if necessary (rather than assuming they were always XML).
Added the BST delegation handler to the list of delegation handlers for the STS server.
Adjusted the logic for the username and password BST validator that determines whether it can handle a given token. (The realm is not being parsed from the web context as the cxf code expects, however it is being passed in the BST.
DDF-551 Changes for PKI authentication using the new BST.

Removed extra # from identifier.
Added 'realm' setter for the PKIHandler.
Updated the blueprint files with the appropriate settings.
Added the username password validator to the features file.
DDF-551 More changes to debug the full path for PKI and Basic Auth in multiple realms.

Added debugging statements to WebSSOFilter.
Changed the BasicAuthenticationHandler to have configurable authentication type.
Updated the X509DelegationHandler to return true for any BinarySecurityTokenType.
DDF-551 Added a realm property to the UPBSTValidator - allowing the one class to support multiple realms with different token validators.
DDF-551 Added logging and fixed a blueprint error in the username password token validation.
DDF-551 Replaced full SAML cookies with references to cached cookies.

Updated SAMLAuthenticationToken to hold either a full cookie or a reference.
SAMLAssertionHandler now checks for either full cookie or cookie reference and creates the corresponding SAMLAuthenticationToken.
WebSSOFilter now sets the realm value on the request as an attribute to enable easy pickin's from the LoginFilter
Added SAMLCache to cache the SAML assertions and provide lookup as references are returned in cookies.
DDF-551 Updated logic and tests for WebSSOFIlter when unexpected results occur.

If we get through without a token, return an unauthorized result.
Adjusted the tests accordingly.
DDF-551 Bug fixes - removed unused claimshandler, handle saml errors, bad logic in SAML handling.
DDF-551 Fixed delegate filter sorting, added security commons,

Updated platform delegate filter to sort received filter services.
Created security commons with http handling and properties loader.
Created platform util to hold osgi utilities.
Removed sorting from the handlers.
Updated SAML handler to use security common util.
DDF-551 Updated dependencies and embedded dependencies.
DDF-551 Fixed dependency for karaf commands. Updated version to 2.4.0-SNAPSHOT
DDF-551 Embedded common security utilities in login filter and x509 validator.
DDF-551 Embedded common-io.