minor changes -

use UserDetails if possible, instead of AuthenticationUser