issue #4 : ApplicationListener<AuthenticationFailureBadCredentialsEvent> called twice