introduce request_store to ensure that the current user doesn't leak acr...

...oss request boundaries (#16685)

Contributed by Holger Just.

git-svn-id: http://svn.redmine.org/redmine/trunk@13110 e93f8b46-1217-0410-a6f0-8f06a7374b81