LPS-39810 Don't depend on ThreadLocal

This was breaking tests because it was not initialized but this is something that could happen to clients of this API and since it's not necessary it's not a good idea to use ThreadLocal.
LPS-39810 Source formatting
LPS-40088 PACL - avoid double permission checking on PortalPolicy failures
LPS-39810 SF
LPS-40078 PACL - ${jboss.home.dir} is included as part of the system classLoader paths
LPS-40078 SF
LPS-39901 Revert changes of LPS-30188 and rollback of LPS-34920
LPS-40079 PACL - eliminate use of sun.security.util.SecurityConstants
LPS-40079 SF
LPS-40081 PACL - don't allow anti[Jar|Resource]Locking in tomcat when security is enabled
LPS-40082 PACL - prevent possible NPE in pacl tests
LPS-40084 PACL - message bus is not properly protected
LPS-40085 PACL - FileChecker NPE when class' package is null
LPS-40085 SF
LPS-40086 PACL - ReferenceRegistry is not protected
LPS-40086 SF
LPS-40048 Remove PortletPreferencesThreadLocal
LPS-40048 SF
LPS-40100 Avoid unnecessary URL instance creation
LPS-40109 saas should be spelled sass