Post authentication event from security system

Moved posting of authentication event to security system.
Replaced ClientInfoProvider restlet based implementation with one that is based on storing the http request in a servlet filter.
inject Provider<HttpServletRequest> instead