Adjust security.basic.enabled=false behaviour

Actually the web-secure sample is misusing
security.basic.enabled=false (IMO) - it should be a flag
to say that you want to temporarily disable the basic security
fallback on application endpoins, not  way to disable all
security autoconfiguration.

Added test case to web-secure sample to ensure a user
can log in.

Fixes gh-979

spring-boot-cli/samples/reactor.groovy

@@ -1,9 +1,8 @@
 package org.test
 
-import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.CountDownLatch
 
 @EnableReactor
-@Consumer
 @Log
 class Runner implements CommandLineRunner {
 
@@ -23,9 +22,27 @@ class Runner implements CommandLineRunner {
 		latch.await()
 	}
 
+	@Bean
+	CountDownLatch latch() {
+		latch
+	}
+
+}
+
+@Consumer
+@Log
+class Greeter {
+
+	@Autowired
+	Reactor reactor
+
+	@Autowired
+	private CountDownLatch latch
+
 	@Selector(value="hello")
 	void receive(String data) {
 		log.info "Hello ${data}"
 		latch.countDown()
 	}
-}
+
+}