Package pro.fessional.wings.slardar.security.bind

Compatible with DaoAuthenticationProvider and can be replaced.
If onlyWingsBindAuthnToken=true, only WingsBindAuthnToken is processed.

Note that WingsBindAuthnToken inherits UsernamePasswordAuthenticationToken
and may be processed by other Providers.
Can't inherit DaoAuthenticationProvider because final `retrieveUser`,
but `mitigateAgainstTimingAttack` is fine, copy all.