Rest Service secured by Http-Basic-Auth with Spring Security; Android app sends Basic-Auth Header on each request, if user is logged in