JBossWebRealm has redundant threadlocal activeRequest

There has been an introduction of a threadlocal in SecurityAssociationValve to store the current request. This thread local can be used in JBossWebRealm to remove its own threadlocal that stores the servletName.