During security processing in the realms, there is no easy way to get to the catalina request object.

We need to remove the thread locals from the SecurityASsociationValve for request caching and introduce a valve at the engine level.