Is this code thread-safe? If two legacy users attempt to log in at about the same time (not unlikely event, I should add), what will guarantee that security-configuration.xml will not endup corrupted?