contextResolvingValve is configured too early in the processing valves

Problem is that the contextResolvingValve is in charge of creating HstComponentWindow instances, possibly conditional on available HstComponentWindowFilter instances. However, the latter typically depend on that first the securityValve, subjectBasedSessionValve and jcrSessionStatefulConcurrencyValve have run. Hence, the order should be changed from

<ref bean="contextResolvingValve" />
<ref bean="localizationValve" />
<ref bean="securityValve" />
<ref bean="subjectBasedSessionValve" />
<ref bean="jcrSessionStatefulConcurrencyValve"/>
to
<ref bean="securityValve" />
<ref bean="subjectBasedSessionValve" />
<ref bean="jcrSessionStatefulConcurrencyValve"/>
<ref bean="contextResolvingValve" />
<ref bean="localizationValve" />

to avoid this typical problem. The HstComponentWindowFilter javadoc should also be more explicit in this