(cherry picked from commit 796716d441)

This is the final commit from the 2.x branch of multiple commits to fix the vulnerabilities
CVE-2019-0213 and CVE-2019-0214

RepositoryRegistry is used for indexing context now. There is still more work to do
to move the maven dependent parts into its own projects and update the dependencies.

Signed-off-by: olivier lamy <olamy@apache.org>

As suggested in the SLF4J FAQ:
https://www.slf4j.org/faq.html#logging_performance
.. parameterized logging can improve the efficiency of logger calls when
logging at the specified level is disabled.

In addition, per the FAQ: https://www.slf4j.org/faq.html#paramException
since SLF4J 1.6.0 it is possible to use parameterized logging and also
log an exception/throwable.

toString() is called automatically:
https://www.slf4j.org/faq.html#string_contents

These changes were suggested by SLF4J Helper for NetBeans IDE:
http://plugins.netbeans.org/plugin/72557/

Signed-off-by: olivier lamy <olamy@apache.org>

Adding new API module (metadata-statistics-api) for statistics and move the
jcr specific tasks to the metadata store module.

Providing interfaces for the statistics API.

Removing dependencies to store specific libraries (like JCR) from the statistic
modules.

Signed-off-by: olivier lamy <olamy@apache.org>

Allow to set a check path for connection checks to the remote repositories.
This is useful for repositories that do not allow to browse the base directory.

Improved the fix for MRM-1933

Remove trailing slashes from the remote repositories
Use special check paths for certain servers

Improved handling of slashes at the beginning of filters
Added patterns for surefire tests to ensure the test runs

Error is only displayed, if LDAP is used as repository. The error
messages are more detailed and internationalized.

Adds additional rest method to list the repositories where the user
has manage permissions.
Restricts the view for uploads to only managable repositories.