security on HTTP server can be disabled for legacy clients from openfire settings
added xmpp connection retry to http server so servers can be started in any order
Former-commit-id: 1e52606fe709f2cf27f835363ca5ab2bf6ada912
collaboration HTTP server now requires auth header (configured via openfire)
added auth to cave client
Former-commit-id: e0e4dfdedff283c809060257fbf04e777faf318d