SecurityRequestListener only injects the request if it is the main request.
Updating SecurityRequestListenerTest for previous commit.