Document Servlet Features by topic

[rwinch]

Summary

• We should split up into categories. An idea is to split up into authentication, authorization, OAuth (it is both), Protection From Common Exploits, integrations (Spring Data, Spring MVC)
• We should strive to document similar to the HTTP headers or CSRF documentation.

[rwinch]

Closing in favor of #5935