case insensitive query for retrieving users by auth.sch id
do not log stacktraces for not found entities
fix for jsession id showing up in url on first request