DDF-958 - Modified Security Plugin to use the user credentials from the request if available instead of always overwriting with the ThreadContext