fixes needed for servlet invocation to be synchronous and security context get properly propagated