Atmosphere instead of Meteor implemented, had to hack
SecurityContextHolder a bit because AJAX-call made backend to forget
SecurityContext while session was still remembered.