Externalized SecurityContext for testing purposes, fixed removeAllSessions REST path