Fix STORE-270 and STORE-236

The commit fixes the session invalidated issue caused by the use of a cached session object (caused by the use of a closure).

The changes also fixed the Tag API not working for tenants.

The fix involved changes to;
-filter.manager
-url.security.provider
-storage.security.provider

These components now use a fresh copy of a session.