Major Description
Currently some operations of the WebSecurityManager fail if there is not a Http Request/Response pair associated with the calling thread. The implementation should be modified to support non-request calls since a WebSecurityManager could be used in situations where there is not a request available (e.g. system bootstrap, non-http remoting from Rich client apps, etc).