Post authentication events from security system

Moved posting of authentication event to security system.
Replaced ClientInfoProvider restlet based implementation with one that is based on storing the http request in a servlet filter.