DDF-958 - Modified Security Plugin to use the user credentials from the ...

...request if available instead of always overwriting with the ThreadContext