Improve security/oauth ; deprecate AuthenticationStrategyJwt

Implementation of an AuthenticationManager (Spring SPI) that works for both oauth and jwt tokens, also our own SPI of AuthConverter.

And, for Restful, a do-nothing AuthenticationStrategy that uses the above (rather than doing any validation in and of itself).