Default vs. demo security

[Jeremy Boynes]

Alan has a config with a dmeo of security tied into Jetty - should we 
merge this into the default configuration (so that we have default 
system, admin and user level accounts)?

--
Jeremy