fix MAGIC BUG related with spring security and spring session