Added null check to username logging MDC data
converted the redirection destination for when the user's CAS session is expired to an absolute path