Moving authentication from web to ejb, not complete