Add an explicit persistent flag, so we do not attempt to start a new request with non-persistent connections
Change the location of security related classes
Change all security mechanisms to using the IdentityManager based approach
Add role mapping manager concept, and use it in Servlet
Update core/src/main/java/io/undertow/ajp/AjpResponseChannel.java

The header on the response end appears to be incorrect. With the header as is, Wireshark is unable to decode the exchange.

I do not expect that this would cause issues in most real-world scenarios at the moment, as the reuse flag is set to false. However, in reuse scenarios, I believe that some httpd daemons (including Apache HTTPD) may reject the end of the exchange, and close the connection.
Upgrade to Netty 3.6.2.Final and so re-enable tests for WebSockets 07