SEC-1044: Removed remember-me functionality from http auto-config namespace configuration. Added explicit <remember-me> elements to contacts and tutorial sample configurations.

samples/contacts/src/main/webapp/WEB-INF/applicationContext-security.xml

@@ -29,6 +29,7 @@
 
         <form-login login-page="/login.jsp" authentication-failure-url="/login.jsp?login_error=1"/>
         <logout logout-success-url="/index.jsp"/>
+        <remember-me />
     </http>
 
     <authentication-provider>

samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml

@@ -26,6 +26,7 @@
         <intercept-url pattern="/post.html" access="ROLE_TELLER" />
         -->
         <intercept-url pattern="/**" access="IS_AUTHENTICATED_ANONYMOUSLY" />
+        <remember-me />
 <!--
     Uncomment to enable X509 client authentication support
         <x509 />