Adding properties for logging user/client info

Taking property implementation from cristiantm in PR #529 for issue #527.
Adding properties for whether to log the username information and/or the
client connection information to the DefaultSecurityConfiguration.
Applying the default TRUE state to ESAPI.properties in both test and
configuration scope.

Author: jeremiahjstacey

configuration/esapi/ESAPI.properties

@@ -391,7 +391,10 @@ Logger.LogServerIP=true
 Logger.LogFileName=ESAPI_logging_file
 # MaxLogFileSize, the max size (in bytes) of a single log file before it cuts over to a new one (default is 10,000,000)
 Logger.MaxLogFileSize=10000000
-
+# Determines whether ESAPI should log the user info.
+Logger.UserInfo=true
+# Determines whether ESAPI should log the app info.
+Logger.AppInfo=true
 
 #===========================================================================
 # ESAPI Intrusion Detection

src/main/java/org/owasp/esapi/reference/DefaultSecurityConfiguration.java

@@ -152,6 +152,8 @@ public static SecurityConfiguration getInstance() {
     public static final String LOG_ENCODING_REQUIRED = "Logger.LogEncodingRequired";
     public static final String LOG_APPLICATION_NAME = "Logger.LogApplicationName";
     public static final String LOG_SERVER_IP = "Logger.LogServerIP";
+    public static final String LOG_USER_INFO = "Logger.UserInfo";
+    public static final String LOG_APP_INFO = "Logger.AppInfo";
     public static final String VALIDATION_PROPERTIES = "Validator.ConfigurationFile";
     public static final String VALIDATION_PROPERTIES_MULTIVALUED = "Validator.ConfigurationFile.MultiValued";
     public static final String ACCEPT_LENIENT_DATES = "Validator.AcceptLenientDates";

src/test/resources/esapi/ESAPI.properties

@@ -424,7 +424,10 @@ Logger.LogServerIP=true
 Logger.LogFileName=ESAPI_logging_file
 # MaxLogFileSize, the max size (in bytes) of a single log file before it cuts over to a new one (default is 10,000,000)
 Logger.MaxLogFileSize=10000000
-
+# Determines whether ESAPI should log the user info.
+Logger.UserInfo=true
+# Determines whether ESAPI should log the app info.
+Logger.AppInfo=true
 
 #===========================================================================
 # ESAPI Intrusion Detection