Enhance authenticaion

 - TokenFilter Provides auth principles: token, tenant, and user
 - WebSocketSession provides authentication Subject