* Added spring security session management so a session is not lost on
refresh f5 but only on logout and session timeout.