explain session, internal and external?
Can you link SecurityContext? I want something similar to:
https://github.com/resteasy/Resteasy/blob/master/jaxrs/jaxrs-api/src/main/java/javax/ws/rs/core/SecurityContext.java
That a plugin could implement this interface and then call SecurityContext.setContext(myContext, THREAD);