Authentication is reloaded from session manually instead of using filterchain.