BROOKLYN-51

If no security properties are set and `--noConsoleSecurity` is not set then `BrooklynLauncher` configures the server to accept unsecured connections from `127.0.0.1` and secured external connections that are authenticated with the user `brooklyn` and a randomly generated password that is logged once. 

The new security filter checks the remote address of the request. I'm assuming that this can't be spoofed.
I would have used `sysout` from `BrooklynLauncher` but to do that I think I would have had to have made `password` static. The security provider's instantiation is deferred until the first request to the server and the launcher has no way to access the instance used (by `DelegatingSecurityProvider`). I thought that it was better to keep `password` different between instances of the class (should there be any).