Changed get userinfo in AuthenticationResource to return empty user instead of forbidden
Fixes for when jboss is not bound to localhost