fix for "PolicyBasedAuthenticationManager doesn't care about existing

attributes" Issue 784
I think it should be the default behaviour ```= true```.