fallback on clientIdentity if no thread context is set in security service + wiring clientidentity in login/logout of httprequestimpl