This commit reverts 45d5b60f

See gh-7883

The default is now SecurityProperties.ACCESS_OVERRIDE_ORDER-1
(instead of 3), and the user can set it with
security.oauth2.resource.filter-order (as opposed to being hard
coded). The filter is provided by Spring OAuth2 so this change is
a BeanPostProcessor to call a setter on that object.

Fixes gh-5072

* pr/7877:
  Add `LoggersEndpoint` to application properties appendix

Closes gh-7877

Closes gh-7846

Update the annotation processor to be completely self contained. The
single required dependency is now "shaded" into the jar.

Fixes gh-7883

Migrate from `org.json:json` to the clean room Apache 2.0 licensed
version that was developed for Android.

Fixes gh-5929

Remove the spring-core dependency from the annotation processor.

Fixes gh-7882

Upgrade to `hibernate-validator` 5.3.4 and introduce a new
`MessageInterpolatorFactory` that creates a suitable
`MessageInterpolator` (taking into account missing EL dependencies).

Rework `ConfigurationPropertiesBindingPostProcessor` and
`ValidationAutoConfiguration` to make use of the new factory.

Fixes gh-7598

Update the `hibernate-core` managed dependency to exclude `cdi-api`.

Fixes gh-7879

* pr/7873:
  Upgrade to Spring Kafka 1.1.2

Fixes gh-7871
Closes gh-7873

Import the additional auto-configuration classes required for
`ErrorAttributes` and change the filter so that it's no longer
hidden.

Fixes gh-7867

Closes gh-7870

Closes gh-6924

This commit removes the automatic enabling of Redis as the Spring Session
store when it is available. This case is covered by a warning in `1.4.x`
that this commit removes as well.

Closes gh-7858

Closes gh-7817

* gh-7763:
  Configure Animal Sniffer to exclude jar containing Java 9 bytecode
  Upgrade to Jersey 2.25

Closes gh-7763

See gh-7763

As of 2.1 cache expiration times are to be set in seconds. This commit
migrates to the new method, yet keeping the milliseconds unit.

Closes gh-7824

Closes gh-7856

* pr/7854:
  Polish

Expose full health details if management security is disabled or
management role is present.

Fixes gh-7604
Closes gh-7852

Update documentation to align with the new role based method.

See gh-6889

Add a Cloud Foundry specific section to "Production Ready Features".

See gh-7108

Update configuration meta-data and appendix to include
`management.cloudfoundry.*` meta-data.

See gh-7108

Closes gh-7810

* pr/7851:
  Reduce memory footprint of AsciiBytes.hashCode

Update `AsciiBytes.hashCode(int hash, String string)` so that it no
longer copies the backing array of the string.

Closes gh-7851

Update `ManagementContextConfigurationsImportSelector` to instantiate
classes so that order annotations are respected.

Fixes gh-7814

Update `TestRestTemplate` to handle `BasicAuthorizationInterceptor`s
correctly. Prior to this commit the `BasicAuthorizationInterceptor`
was added directly to the `ClientHttpRequestFactory` rather than
to the `RestTemplate`. This meant that it could not easily be removed
when `TestRestTemplate.withBasicAuth` was invoked.

The `TestRestTemplate` now sets the interceptor on `RestTemplate`
directly and relies on the logic in `InterceptingHttpAccessor` to
add it to the `ClientHttpRequestFactory`.

Fixes gh-7812