[JBPM-4235] fix CDI producer for JAAS-backed UserGroupCallback

This may not be a good patch, or at least not a complete patch. Please review comments in JIRA