Post authentication events from security system

Moved posting of authentication event to security system.
Replaced ClientInfoProvider restlet based implementation with one that is based on http request.

http://bamboo.s/browse/NX-OSSF353
Return value of `getCurrentThreadClientInfo` is marked as `@Nullable`, but there's no checking for `null` here.