An uninstantiatable class that provides a servlet container-independent
interface to the authentication system and a list of useful constants.
A predefined list of roles will be used. Optionally, it is possible to
define additional roles by creating a file called security-roles.proeprties.
Here is an example for adding 2 additional roles:
The 'default' roles are always going to be added, so the above list is
The role names will be translated to upper case, prefixing it with 'ROLE_'.