Pulled Controller access of User object into SecurityUtil. Also a little tidying and now we have one @ExceptionHandler