Rest Security Working with "in memory" authentication