added test for delayed session creation, serializing UsernamePasswordAuthenticationToken and unmodifiable collections
removed swp