[JBPM-4235] fix CDI producer for JAAS-backed UserGroupCallback

This may not be a good patch, or at least it may not be a complete one.  Please review the comments in the JIRA.