deprecated the jetty8 version of the saml bearer token auth filter - the base class now actually works across platforms
merged with upstream