Fedora Commons Code

Merge in branch FCREPO-577: FeSL - policies as first-class Fedora objects

Restrict policy management (policy management requires FeSL "admin" action permission):
- add XACML action for policy management
- add mapping to FeSL "admin" action
- add XACML action to REST and SOAP PEP handlers

Add (commented out) section to logback.xml to send FeSL debug messages to separate fesl.log (makes debugging policies a lot easier)

Fix: DBXML (tested on ver 2.5.13) is not updating document metadata on an update (but is updating document itself).
This is causing problems when editing policies; eg delete/add subjects and resources not being reflected in metadata and therefore policies not being correctly found by policy finder.
Modify DbXmlPolicyIndex to delete then add document when doing an update.

- merge in trunk r8697-r8724
- incorporate Chris' comments from code review
- correct configC TestRESTAPI failure (PIDs need URL-encoding in validate test)
- update policy id (mis-spelt) in demo object collection example policy (minor)

So that the tests run

Should work now with RELS-INT

Remove from source (generated code) - these have already been removed from trunk so remove from branch to prevent accidentally adding them back in.

Fixes FCREPO-754 - No authentication for UserServlet with FeSL AuthN and API-A auth turned off
(AuthFilterJAAS now explicitly tests for /user URL and treats as per API-M)

Fixes FCREPO-753: Credentials not passed through for API-A REST calls when FeSL AuthN enabled