Fix for Proxy URL parameter vulnerability.

Fix for a vulnerability where client could access localhost resources via proxy url.

Added a permissions file so that the urls that are permitted to be proxied can be controlled.  By default all accesses to localhost (server localhost) are denied.

Also any protected services (extractorapp, geonetwork, etc...) are denied because they must be accessed using the path proxy strategy this way the spring security can add extra authorization checks.
Merge branch '13.09-proxy-permission' into 13.09

Conflicts:
	pom.xml
	security-proxy/pom.xml
add missing resource files required by tests.
Merge branch '13.09-proxy-permission' into 13.09