Spring Security authentication and session basket