Security Layer - Investigation for Implementation Strategy

Things to consider:
Oauth SAPI
Expire tokens

The following comment has been copied into this ticket due to all the noise from CI comments, please also read the attached documents:

********************************************************************************************************************

Please read the attached documents to understand the implementation strategy and usage workflows for the OAuth Provider and External API security.
Once everything is finalized and has been tested, the docs will be uploaded to one of wiki/confluence/office365.
Use the following builds to test this feature:

AML Data Tool
http://pulse:8081/nexus/content/repositories/snapshots/com/thesearchagency/services/aml-data-tool/2.8.1-oauthprovider-SNAPSHOT/aml-data-tool-2.8.1-oauthprovider-20151110.143237-4.jar

SAPI
http://pulse:8081/nexus/content/repositories/snapshots/com/thesearchagency/services/aml-sapi/2.9.0-SNAPSHOT/aml-sapi-2.9.0-20151116.101150-265-standalone-no-db-init.war

AML OAuth Provider
http://pulse.ri.thesearchagency.com:8081/nexus/content/repositories/snapshots/com/admaxlocal/external/aml-oauth-provider/1.0.0-SNAPSHOT/aml-oauth-provider-1.0.0-20151117.203230-21.war

Merchant API
http://pulse.ri.thesearchagency.com:8081/nexus/content/repositories/snapshots/com/admaxlocal/external/merchant-api-secure/1.0.0-SNAPSHOT/merchant-api-secure-1.0.0-20151117.203147-21.war

Taxonomy API
http://pulse.ri.thesearchagency.com:8081/nexus/content/repositories/snapshots/com/admaxlocal/external/taxonomy-api-secure/1.0.0-SNAPSHOT/taxonomy-api-secure-1.0.0-20151117.203202-13.war

Budget API
http://pulse.ri.thesearchagency.com:8081/nexus/content/repositories/snapshots/com/admaxlocal/external/budget-api-secure/1.0.0-SNAPSHOT/budget-api-secure-1.0.0-20151111.161638-5.war
Please let me know if you have any questions.

Note: You will have to load the taxonomy for the environment also. This can be done using loadDataForTest.sh which is attached to this ticket, make sure you use either a screen session or nohup when loading data. This should be run from the aml-data-tool/src/main/resources/db folder.

Note: Updated builds after merging with main branch.