Fix for REM3-169 

The commit here fixes the issue reported in https://issues.jboss.org/browse/REM3-169 where the client CAPABILITIES were being ignored on the server side on a auth failure.