v2.0.0-rc.2

Changed

• AccessLogger's default connectTimeout/timeout lowered from 10s/20s to
  2s/3s. The webservice call is still synchronous (it runs inline in
  handleUserPassLogin()), so a slow or unreachable webservice must not add
  more than a couple of seconds to a failed login.