Minor portlet-related changes suggested by John Lewis: Javadoc and default values of booleans.

core/src/main/java/org/springframework/security/providers/preauth/PreAuthenticatedAuthenticationProvider.java

@@ -117,7 +117,7 @@ public class PreAuthenticatedAuthenticationProvider implements AuthenticationPro
     /** 
      * If true, causes the provider to throw a BadCredentialsException if the presented authentication 
      * request is invalid (contains a null principal or credentials). Otherwise it will just return 
-     * null.  
+     * null. Defaults to false.
      */    
     public void setThrowExceptionWhenTokenRejected(boolean throwExceptionWhenTokenRejected) {
         this.throwExceptionWhenTokenRejected = throwExceptionWhenTokenRejected;