Backport : HST JAAS Login Support doesn't work by default due to hst-commons jar location since 7.8

Leo Boulanger spotted an issue in hippo-community@.
The TransientRole cannot be found by the Tomcat JAASRealm with the default deployment:

Sep 27, 2013 10:09:32 AM org.apache.catalina.realm.JAASRealm parseClassNames
SEVERE: Class org.hippoecm.hst.security.TransientUser not found! Class not added.
Sep 27, 2013 10:09:32 AM org.apache.catalina.realm.JAASRealm parseClassNames
SEVERE: Class org.hippoecm.hst.security.TransientRole not found! Class not added.

TransientUser should be in shared classpath, but since 7.8 hst-commons jar including the class has been deployed in webapp lib path instead. That's why tomcat jaas can't find it.
A quick solution might be to move hst-commons jar to tomcat shared lib path in your project. But we'll need to fix it right in product asap.