NEXUS-6359: Fix intermittent MDC pollution on challenge

By using ApplicationStatusSource only once to grab app
version and reuse the version when client challenged.
[NEXUS-6473] Update window name for download frame for IE.  Add static constants with docuemntation.
Merge pull request #425 from sonatype/NEXUS-6359-intermitted-mdc-pollution-on-challenge

NEXUS-6359: Fix intermittent MDC pollution on challenge
Merge remote-tracking branch 'origin/master' into NEXUS-6356-rut-misidentification
NEXUS-6356: Fixing the IT

As this change fixed another RUT problem, and IT was
expecting 403 for "unknown" user. But this is wrong,
as unknown users should get 401 and not 403.

This was caused by the fact that old RUT realm checked
that set returned by SecuritySystem#searchUsers
is null. But that method never returned null
but empty set instead. So to say, if request
had RUT header set, it was taken as logged in
automatically, but maybe with empty set
of permissions.