don't invalidate session after logout with spring security plugin