research delegating httpsession to redis using spring security