Moved anything that depends on Jersey/JAXRS/SecurityContext into the
ws.rs package. Only basic HTTP session/header functions are left.