More spring security and session work.