SEC-2783: XML Configuration Defaults Should Match JavaConfig

* j_username -> username
* j_password -> password
* j_spring_security_check -> login
* j_spring_cas_security_check -> login/cas
* j_spring_cas_security_proxyreceptor -> login/cas/proxyreceptor
* j_spring_openid_security_login -> login/openid
* j_spring_security_switch_user -> login/impersonate
* j_spring_security_exit_user -> logout/impersonate
* login_error -> error
* use-expressions=true by default

samples/openid-xml/src/main/webapp/WEB-INF/applicationContext-security.xml

@@ -16,7 +16,7 @@
     <http pattern="/js/*" security="none" />
 
     <http>
-        <intercept-url pattern="/**" access="ROLE_USER"/>
+        <intercept-url pattern="/**" access="authenticated"/>
         <logout/>
         <openid-login login-page="/openidlogin.jsp" user-service-ref="registeringUserService"
                 authentication-failure-url="/openidlogin.jsp?login_error=true">

samples/openid-xml/src/main/webapp/index.jsp

@@ -21,6 +21,6 @@ by the application and will be recognized if you return.
 <p>
 Your principal object is....: <%= request.getUserPrincipal() %>
 </p>
-<p><a href="j_spring_security_logout">Logout</a>
+<p><a href="logout">Logout</a>
 </body>
 </html>

samples/openid-xml/src/main/webapp/openidlogin.jsp

@@ -36,7 +36,7 @@
 </c:if>
 
 <!-- Simple OpenID Selector -->
-<form action="<c:url value='j_spring_openid_security_check'/>" method="post" id="openid_form">
+<form action="<c:url value='login/openid'/>" method="post" id="openid_form">
     <input type="hidden" name="action" value="verify" />
 
     <fieldset>