JBoss DigestAuthenticator is prone to generating duplicate nonces

Issue

• The nonce is generated with the value of request.getRemoteAddr() and the current system time at creation. In our case, request.getRemoteAddr() is always the same for all clients. Thus, under heavy concurrent load with nonces being generated at the same time, duplicate nonces are generated and given to multiple clients. Nonce counts then get out of order resulting in rejected requests.