Intended for example and demo purpose, this class authenticates a user when the username matches
the password, which also represents the permissions the user is granted.
It also validate an auth token if it's present
Verify the credentials provided in the properties
Your security manager needs to validate credentials coming from all communication channels.
If you use AuthInitialize to generate your client/peer credentials, then the input of this
method is the output of your AuthInitialize.getCredentials method. But remember that this
method will also need to validate credentials coming from gfsh/jmx/rest client, the framework
is putting the username/password under security-username and security-password keys in the
property, so your securityManager implementation needs to validate these kind of properties
if a channel supports token-based-authentication, the token will be passed to the
security manager in the property with the key "security-token".