Add an explicit persistent flag, so we do not attempt to start a new request with non-persistent connections
Change the location of security related classes
Change all security mechanisms to using the IdentityManager based approach