Should you also include "FEDORA_USER_PRINCIPAL" in this "else" block?
<code>
sessionAttributes.put(
                    FedoraAuthorizationDelegate.FEDORA_USER_PRINCIPAL,
                    EVERYONE);
</code>