We can't just decorate with @Component, because the package edu.wisc.uwss.preauth isn't @ComponentScan'ned (edu.wisc.uwss.configuration.preauth is).

Corrected the logger for the Federated attributesmapper, it was incorrectly using the Default implementation (so you couldn't tell which class was lgogging).

Added a Maven profile to help test: combined-simulate-federation.

New feature: simulated shibboleth session handler.

New feature: simulated shibboleth session handler.

Backed with current authenticated UWUserDetails.

Due to new features.

Previous presence on ProfileController resulted in those APIs leaking to downstream consumers of uw-spring-security-web.
Also adds an HttpSecurityAmender for configuring auth for /profile.

Bump to version 1.0.0-SNAPSHOT.

This refactor was needed as the prior code did not fully support the 'combined' approach with both local-users and preauth. In the previous iteration, 2 WebSecurityConfigurerAdapters and as a result, 2 HttpSecurity instances would have been registered, only one having any affect (typically the preauth, but not guarantees).

There is now only one WebSecurityConfigurerAdapter, whose sole purpose is to collect all HttpSecurityAmenders and execute their callback at the right time.  Te existing WebSecurityConfiguration classes for both profiles have been retrofitted to produce HttpSecurityAmenders that perform the desired behavior. The test cases provided in the sample-war have been updated to provide 2 combined test paths:

* 1 that has both profiles active, but demonstrates how fallback to HTTP Basic works, and
* 1 that has both profiles active, and includes the simulation filter to produce a successful preauthentication.