SEC-1171: Changed attribute name/value from secured="false" to security="none" to allow future extension by adding extra options (e.g. contextOnly to provide security context information during the request).

itest/web/src/main/webapp/WEB-INF/http-security-custom-concurrency.xml

@@ -6,7 +6,7 @@
     xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
                         http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.1.xsd">
 
-    <http pattern="/login.jsp" secured="false" />
+    <http pattern="/login.jsp" security="none" />
 
     <http entry-point-ref="aep">
         <intercept-url pattern="/**" access="ROLE_DEVELOPER,ROLE_USER" />

itest/web/src/main/webapp/WEB-INF/http-security.xml

@@ -10,7 +10,7 @@
        Http App Context to test form login, remember-me and concurrent session control.
        Needs to be supplemented with authentication provider(s)
     -->
-    <http pattern="/login.jsp" secured="false" />
+    <http pattern="/login.jsp" security="none" />
 
     <http use-expressions="true">
         <intercept-url pattern="/secure/**" access="hasAnyRole('ROLE_DEVELOPER','ROLE_USER')" />