Make field final

Thread-safety/visibility issue since the class can be called from arbitrary threads in Jetty.