spring security-session-null-solved+user principal
ssec-session-userprincipal