#69 Use User.current() method in SecurityFilters.  Return null rather than false if no user is found.