fix for "PolicyBasedAuthenticationManager doesn't care about existing

attributes" Issue 784
I guess you should have a blank between ```if``` and ```(merge```, as well as between ```!= null)``` and ```{```.
Maybe you could have a property for ```result.getPrincipal()``` as you reuse it below.