[CXF-5603] - The DefaultSecurityContext should use a supplied username to help find the User Principal