Move ensure subject profile to AuthenticationResource because of null principal on SessionListener