Make AuthenticationManager configuration more reliable

[dsyer]

The AuthenticationManagerConfiguration in "spring-boot-autoconfig" is often a source of bugs. The current situation is that there are no requirements we are aware of that can not be implemented, but sometimes the recommended ways of configuring authentication from the Spring Security guides do not work. It would be a lot more stable if there was a way for AuthenticationManagerConfiguration to be less stateful.