HttpAuthenticatorFactory returning implementation class rather than HttpAuthenticator interface

Apart from the obvious reason, that interfaces should be used in preference to implementation classes, the real problem here is that this breaks anything compiled against older versions of crowd (2.0.6 and earlier), they will throw NoSuchMethedErrors, and so this is a serious regression.