Add SecurityAssertions

[jzheaux]

There are many Security tests that extract authorities, convert them to strings, and then assert their contents.

It would be nice to centralize that somewhere to make tests more readable as well as govern assessing authorities from a single place. This is handy, for example, in

This won't be a public API; however, it should be applied across the Spring Security test suite to improve readability.