Post authentication event from security system

Moved posting of authentication event to security system.
Replaced ClientInfoProvider restlet based implementation with one that is based on storing the http request in a servlet filter.
guice components should already have access to the request, so not sure why you needed to stuff it into a thread local

I think best to leave this filter as a simple adapter to set base-url and not add additional responsibilities to it.