Changed AuthenticationBean to session scoped. It will load user and
employee information if successfully login. Later on it can pull a list
of access rights before render the main page.