ISPN-3911 HotRod authentication server integration fixes

- cleanly separate the secure and unsecure paths
- use an ANONYMOUS Subject in the secure path until a user has been authenticated