If you have missed the question @battags, would it make sense to use a ```AuthenticationRedirectStrategy``` instead of a simple ```response.sendRedirect```?