Refactored doFilter flow
All under /api/** are secured
Refactored the code & use single exception
Not relying SecurityContextHolder to control authentication. However needs to populate Authentication for other api to use
Support multiple users using same browser but different tabs. But Authentication should be loaded
Prepared to test when using SecurityContextHolder when passing to api
Concurrent 2 users, multi-tab, single browser support. Only user not fully loaded. Need custom UsernamePasswordAuthenticationToken
Trace Number loaded