SRV.7.7.2 compliance. Send HttpSessionActivationListener events if session will be replicated or stored in write-through cache store.
Fix recurrance of "Singleton not set for ModuleClassLoader ... This means that you are trying to access a weld deployment with a Thread Context ClassLoader that is not associated with the deployment." errors.  Apparently Weld still needs the TCCL set when serializing/deserializing state.
Don't deserialize session attributes eagerly when using coarse session mapping.  This can cause unnecessary deserialization on view change when session expiration rescheduling occurs.
fix JMSDestinationDefinition creation

* fix typo in startQueue/startTopic to use the correct queueName/topicName
  to create the destination path (instead of destinationName that can be
  null)
* fix check in uniqueName(): destination will be set to "" if it's not
  present in the destination definition.
[WFLY-490] / [WFLY-2037] Reply with a 403 for authz failures