Java Subject is no longer attached to the thread on http requests

[ryeats]

When deploy and using hawt.io or the karaf console in DDF the java subject is no longer being attached to the thread authentication fails. There is no workaround DDF applications are unaffected because the DDF subject is attached.

Steps to Reproduce

Add the following lines to custom.system.properties prior to startup
hawtio.authenticationEnabled=false
hawtio.sessionTimeout=86400

Start DDF and in karaf console:
feature:repo-add mvn:io.hawt/hawtio-karaf/2.13.2/xml/features
feature:install hawtio
in browser:
navigate to https://localhost:8993/hawtio

Expected behavior :

see the hawtio console with JMX tab

Actual behavior:

see the connection dialog to connect to a remote jolokia instance because it failed to talk to the one in /hawtio/jolokia

Affects versions

ddf-2.26.0 until now