Fixed and issues with the request parameter name. It is now matching the same name as set in the security interceptor. Mardao is now setting the createdBy and updatedBy properties.