XNAT-4450 Fixed issues where UsernamePasswordAuthenticationToken objects were passed for guest user, confusing anon access and causing redirects to login page. Cleaned up confusing log4j2 references.