cleaning up security context correctly (mainly touching @asynchronous)

git-svn-id: https://svn.apache.org/repos/asf/tomee/tomee/trunk@1597040 13f79535-47bb-0310-9956-ffa450edef68