Switch to sys/wrapping endpoints for response unwrapping.

Cubbyhole and wrapped AppRole authentications now use sys/wrapping endpoints to unwrap responses by default. Both authentication mechanisms can be configured with UnwrappingEndpoints to switch back to cubbyhole.

Closes gh-163.

src/main/asciidoc/new-features.adoc

@@ -10,6 +10,7 @@
 * `LifecycleAwareSessionManager` and `ReactiveLifecycleAwareSessionManager` emit now ``AuthenticationEvent``s.
 * <<vault.authentication.pcf>>.
 * Deprecation of `AppIdAuthentication`. Use `AppRoleAuthentication` instead as recommended by HashiCorp Vault.
+* `CubbyholeAuthentication` and wrapped `AppRoleAuthentication` now use `sys/wrapping/unwrap` endpoints by default.
 
 [[new-features.2-1-0]]
 === What's new in Spring Vault 2.1

src/main/asciidoc/reference/authentication.adoc

@@ -25,7 +25,7 @@ OS access levels.
 ====
 [source, java]
 ----
-@PropertySource("configuration.properties"),
+@PropertySource("configuration.properties")
 @Configuration
 public class Config extends AbstractVaultConfiguration {
 
@@ -669,7 +669,7 @@ class AppConfig extends AbstractVaultConfiguration {
 ====
 [source,shell]
 ----
-$ vault token-create
+$ vault token create
 Key                    Value
 ---                    -----
 token                  f9e30681-d46a-cdaf-aaa0-2ae0a9ad0819
@@ -678,7 +678,7 @@ token_duration         0s
 token_renewable        false
 token_policies         [root]
 
-$ token-create -use-limit=2 -orphan -no-default-policy -policy=none
+$ vault token create -use-limit=2 -orphan -no-default-policy -policy=none
 Key                    Value
 ---                    -----
 token                  895cb88b-aef4-0e33-ba65-d50007290780