Update todo
Fix locale resolver. Use request.getLocale if anonymous login