New feature: simulated shibboleth session handler.

New feature: simulated shibboleth session handler.

Backed with current authenticated UWUserDetails.

Due to new features.

Previous presence on ProfileController resulted in those APIs leaking to downstream consumers of uw-spring-security-web.
Also adds an HttpSecurityAmender for configuring auth for /profile.

Bump to version 1.0.0-SNAPSHOT.

This refactor was needed as the prior code did not fully support the 'combined' approach with both local-users and preauth. In the previous iteration, 2 WebSecurityConfigurerAdapters and as a result, 2 HttpSecurity instances would have been registered, only one having any affect (typically the preauth, but not guarantees).

There is now only one WebSecurityConfigurerAdapter, whose sole purpose is to collect all HttpSecurityAmenders and execute their callback at the right time.  Te existing WebSecurityConfiguration classes for both profiles have been retrofitted to produce HttpSecurityAmenders that perform the desired behavior. The test cases provided in the sample-war have been updated to provide 2 combined test paths:

* 1 that has both profiles active, but demonstrates how fallback to HTTP Basic works, and
* 1 that has both profiles active, and includes the simulation filter to produce a successful preauthentication.

2 primary changes contribute to the combination working:

1. Renaming the *WebSecurityConfiguration classes so they don't have the
same computed bean name.
2. Setting the appropriate order on the *WebSecurityConfiguration
classes so that preauth loads first, then local-users.

Includes a number of changes to sample-war module in order to
demonstrate usage.