try different approach based on GSSapi example, using com.danrollo.negotiate.waffle.NegotiateAuthenticationFilter.