SecureStringDeserializer incorrect use of `getText()` method

[jaroslawZawila]

I believe there is implicit assumption that JsonParser passed to deserialize method is set to current token of VALUE_STRING.
That means that when .getText() method is invoked returns the full string representation of SecureString.

Unfortunately, in some cases when the current token is not of type VALUE_STRING the result is not as expected.
If the current token is set to START_OBJECT then .getText() returns { and that is used to create SecureString.

I think the deserialisation should fail if if the current token is not VALUE_STRING and is not based64 encoded.

[kulikov]

    public SecureString deserialize(JsonParser jsonParser, DeserializationContext context) throws IOException {
        if (jsonParser.currentToken() != JsonToken.VALUE_STRING) {
            throw new IllegalArgumentException("Incorrect value for SecureString deserialization! Current value type is: " + jsonParser.currentToken());
        }

        return SecureString.fromString(jsonParser.getText());
    }

Would it fix this issue?