Adding CssUrlAuthorizationProcessor

Interactions between multiple processors can 'break' URLs that are known
to the ResourceAuthorizationManager. This processor can be put as a post
processor following the other processors to 'fix' this.