Post authorisation event from security system

Moved posting of authorisation event to security system.
Replaced ClientInfoProvider restlet based implementation with one that is based on storing the http request in a servlet filter.