[NEXUS-7785] allow user-id set by shiro to be used in request-log

https://issues.sonatype.org/browse/NEXUS-7785

A bit hackish, but couldn't find another simpler solution due to the wrapping nature of shiro implementation and the request-log reliance on the underlying HttpServletRequest.getRemoteUser() which is alway null in the context of shiro authenticated request (since its wrapping to adorn those details and the wrapper doesn't live beyond the request context below the SecurityFilter and thus isn't available to the RequestLogHandler).