ISPN-3911 HotRod authentication server integration fixes
- cleanly separate the secure and unsecure paths
- use an ANONYMOUS Subject in the secure path until a user has been authenticated