No authentication to secure the access to the monitoring page

[evernat]

The access to the monitoring page (reports of the plugin) should be restricted to system admin.
But the access is currently granted to anyone knowing the URL, except if the "javamelody.authorized-users" system property is used.

[evernat]

There is a supposed fix, but it will probably be compatible only with Sonar 3.7 or later:
https://github.com/evernat/sonar-javamelody/blob/master/src/main/java/org/sonar/plugins/javamelody/SonarMonitoringFilter37.java