Remove side effect on WhiteListAuthenticationFilter so set the requesting host name into the request, this is now done in HostNameFilter for all requests. The Auth filter only did this during the first call in session.