javadoc updates, chunked up BasicHttpAuthenticationFilter's logic to be more maintainable and configurable