Enabled security in the test project, cherry picked some test patches
cherrypicked Fixed NPE and improved logging on authentication failures. Added more security unit tests

commit: 5dc6a68e02f03ded13851a7ab9bedd179087f222 [5dc6a68]
Fix: keyExists for data services should always execute in sudo context. Also added assert for serialization microflows.
Cherrypicked: All services now checks whether there inputs and outputs are actually readable by the requesting user,

..to avoid empty objects with no data.

Commit: 4115cd9edac06e5264b375d5b03301f97caee7f2 [4115cd9]
#5: RestServices now uses application/json instead of text/json

Which is the official contenttype. Fixes #5. For maximized and backward compatibility (when publishing), anything 'json' is accepted.
Cherry-picked: If no contenttype is set, and no binary data is expected, fall back to JSON.

Commit: aeca301ba68af344f731c3e25aad4651902903e1 [aeca301]
introduced mx4 compatibility api for checking metadataaccess
Couple of renames to made the code easier to understand

ServiceDefinition -> DataServiceDefinition
PublishedMicroflow -> MicroflowService
PublishedService -> DataService
Cherry picked: Fixed #8: any output (even none) is now acceptable for published microflowservices.

Commit: 3be78a10aa0b10b78930d7f3343fb5142a6f36b0 [3be78a1]
the type of primitive type null in jsonschema is "null", not null, which would represent no type. savvy?
null is now accepted for string values when parsing. Fixes #9
Cherry-picked: Fixed #7: Service names are now always lowercase (and served case in-sensitive).

Commit: f23b3cc81829bfed8b8f1c53ce6df5290b9b663d [f23b3cc]
Disabled automatic cookie management. Fixes #6
Backported & fixed security unit tests
Fixed mpr, it somehow lost its default values?!