Tracking missing documentation

[mkurz]

General

• Replace occurences of F.Promise in the docs. See Update the book (F.Promise to CompletionStage) #27
• Mention possibility of setting play.http.actionComposition.controllerAnnotationsFirst = [true | false] to controll if controller annotations/constraints should run before or after the method ones.

Since version 2.6.3

• There is a DefaultSubject class that can be used. See pull request Add generic DefaultSubject #44

Since version 2.6.4

• deadbolt.java.cache-before-auth-check=[true | false (default) ]
  Caches the result of deadboltHandler.beforeAuthCheck(...) for the current request (similar to deadbolt.java.cache-user). Also see Allow caching of multiple subjects per request #48 (comment)
• Constraint modes
  deadbolt.java.constraint-mode can be PROCESS_FIRST_CONSTRAINT_ONLY (the default, backward compatible), AND (all constraint annotations of the current action composition chain have to be successful) or OR (only one constraint annotation of the current action composition chain has to be successful) See tests added in Adding tests for all the different modes (OR, AND and the default one) #83 for examples
• @Pattern: added mode attribute (can be AND or OR) + value attribute takes an array now
  Exampe see AND/OR mode for @Pattern constraint #88
• Clarify how caching works, see How long are Subjects cached in deadbolt? deadbolt-2#75 (comment)

Since version 2.7.0

• Moved away from Http.Context and ctx.args to Http.RequestHeader and it's request attributes (e.g. in the deadbolt handler methods): See Play migration guide and Upgrade to Play 2.7.0-RC3 #95
• The "Commented routes" feature changed to use route modifier tags instead of comments. In short that means #deadbolt:... becomes + deadbolt:... and DeadboltRouteCommentFilter* classes were renamed to DeadboltRouteModifierTagsFilter*. For more details please see Use route modifier tags instead of comments in filter #96.
• Reflect in docs that DeadboltHandler.beforeAuthCheck(Http.RequestHeader context, Optional<String> content) also gets content passed now, see [2.7] Remove deprecated beforeAuthCheck(...) method #77
• Constraint annotations are now @Repeatable (actually works with version 2.6.4 and Play 2.6.11 already, however we shouldn't mention it before deadbolt 2.7 comes out so people try to use it with lets say Play 2.6.8). Example see Let's make constraint annotations @Repeatable #70
• @Deferrable was removed - remove it from the docs, see [2.7] Remove @Deferrable annotation - it's not needed anymore #81
• alwaysExecute is now false by default (it should have been false always anyway like it says in the docs) see [2.7] alwaysExecute behaviour should match the documented one #76
• Remove the whole ExecutionContextProvider stuff and the deadbolt.java.custom-execution-context config, see [2.7] Remove unnecessary ExecutionContextProvider #46
• The deadbolt twirl templates/tags expect an implicit requestheader to be present in the implicit scope now. That however is not a breaking change immediately, because Play's TemplateMagicForJava takes care of this by provding you that implicit requestheader by getting it from the context thread-local. More details see Play migration guide
• Finally moved the default configs to the reference.conf file (instead of having it in a ConfigKeys class)