DDF-510: Added unit tests to verify security is being sent in.
Verifies user property is set with either user name or session id (when security is not enabled in the system).