SEC-2963: Update to latest Google AppEngine

samples/gae-xml/src/main/java/samples/gae/security/AppRole.java

@@ -27,6 +27,6 @@ public enum AppRole implements GrantedAuthority {
 	}
 
 	public String getAuthority() {
-		return toString();
+		return "ROLE_"+toString();
 	}
 }

samples/gae-xml/src/main/webapp/WEB-INF/appengine-web.xml

@@ -3,6 +3,7 @@
 	<application>gaespringsec</application>
 	<version>1</version>
 	<sessions-enabled>true</sessions-enabled>
+	<threadsafe>true</threadsafe>
 
 	<system-properties>
 		<property name="java.util.logging.config.file" value="WEB-INF/logging.properties"/>

samples/gae-xml/src/main/webapp/WEB-INF/applicationContext-security.xml

@@ -6,6 +6,7 @@
 	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
 	http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">
 
+	<http pattern="/_ah/**" security="none"/>
 	<http pattern="/static/**" security="none" />
 	<http pattern="/favicon.ico" security="none" />
 	<http pattern="/loggedout.htm" security="none" />