SEC-2599: HttpSessionEventPublisher get required ApplicationContext

In order to get better error messages (avoid NullPointerException) the
HttpSessionEventPublisher now gets the required ApplicationContext which
throws an IllegalStateException with a good error message.