implement securitycontext with returning actual user information
Merge remote-tracking branch 'origin/020' into 020