In connector subsystem security application configuration

<security>
    <application/>
</security>

was removed as invalid during refactor to Elytron-only configuration. This is an error. This configuration deals with scenario that is described in JCA's specification security contract's component managed sing-on and should be reinstantiated.