TYRUS-380: setContextClassLoader is privileged action

- not marking it as one causes issues when using client in JNLP
TYRUS-374: Websocket engine is invoked on Grizzly even if the application and request context root do not match