Fix #757, disable authentication by default in servlet containers but enable it by default when no initial context is available (like in karaf)