<actiondev="luke_t"type="update">Changed order of credentials verification and expiry checking in DaoAuthenticationProvider. Password must now be successfully verified before expired credentials are reported. </action>
<actiondev="benalex"type="update">AnonymousProcessingFilter offers protected method to control when it should execute</action>
<actiondev="benalex"type="fix">AbstractAuthenticationToken.getName() now returns username alone if UserDetails present</action>
<actiondev="raykrueger"type="update">AuthorityGranter.grant now returns a java.util.Set of role names, instead of a single role name</action>