And I would go further : do we need a real userDetailsService here ? We just need to know that the authentication has happened, we don't want any additionnal information about the user.