protected Set<String> defaultAllowedIssuers() {
        return Collections.<String>emptySet();
    }
@return the default set of allowed issuers
common/servlet/src/main/java/io/apiman/common/servlet/AuthenticationFilter.java