SEC-2189: Modifed the AbstractAuthorizeTag#authorizeUsingUrlCheck

When make an authorization decision based on the URL and HTTP method attributes,
if multiple WebInvocationPrivilegeEvaluator are defined,
was modified as call the isAllowed() of all WebInvocationPrivilegeEvaluator.