Use RequestStore gem instead of Thread.current to avoid keeping same security_policy between requests