UserBuilder does not allow authorities to be overridden

[dkorotych]

Broken backwards compatibility. There is currently no way to reset the this.authorities list.
For example, the code will not work correctly,

final User.UserBuilder builder = User.withUserDetails(userDetails);
if (CollectionUtils.isEmpty(authorities)) {
  builder.authorities(Collections.emptyList());
} else {
  builder.authorities(authorities.toArray(String[]::new));
}
userDetailsManager.updateUser(builder.build());

it will always merge new and old authorities, but the previous version will overwrite them

[pivotal-cla]

@dkorotych Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

[pivotal-cla]

@dkorotych Thank you for signing the Contributor License Agreement!

[jzheaux]

This appears related to #12555

[sjohnr]

Thanks @dkorotych! This is now merged as 4def405. I also added a polish commit 1f04baa.