Support combination of local-users and preauth profiles

2 primary changes contribute to the combination working:

1. Renaming the *WebSecurityConfiguration classes so they don't have the
same computed bean name.
2. Setting the appropriate order on the *WebSecurityConfiguration
classes so that preauth loads first, then local-users.

Includes a number of changes to sample-war module in order to
demonstrate usage.