[AS7-6730] Instead of relying on a ThreadLocal to access the connection wrap it in a Credential

Also, the Connection is now wrapped regardless of if security is actually enabled - if security is not enabled then it is still available when the call reaches the first secured EJB.

In the meantime this also allows other beans to replace the Principal and Credential should it be required.