Disable 3rd party security plugins

 In order to provide a stronger guarantee to our solutions, that if a
 cluster is running the default distribution and has security
 (authentication) enabled,
 then it will be provided by Elastic's security features, and users can
 rely on it behaving in the ways they expect, this change 1) mandate
 that security in default distribution is provided by X-Pack by always
 installing the Security Rest Filter and 2) adding warnings if
 credentials are provided to a cluster that does not have security
  enabled.

Related: elastic#188