fixes to remove the jms utils security context so that the username
token interceptor will populate the security context.
added test case for bad creds