AuthzAuthenticationFilter supports client authentication based on client_id/client_secret parameters.
If the client_id or clientAuthenticationManager is null, no client authentication will be attempted(backwards compatible)

The UaaRequestMatcher now prints its name during debug logging. This is immensly helpful to understand what matcher actually had a match.

oauth-endpoints.xml must be evaluated after login-server-security.xml if we are to give Login Server first dibs to match /oauth/token requests.
comments only
Work in progress, cant get the last auth and the auth manager to cooperate
WIP refactor
Merge branch 'feature/refactor_token_passthru' into feature/token_passthru_to_uaa

Conflicts:
	common/src/main/java/org/cloudfoundry/identity/uaa/authentication/AuthzAuthenticationFilter.java
	uaa/src/main/webapp/WEB-INF/spring/login-server-security.xml