Just wondering was this supposed to change from `set` to `setIfNeeded`?

For reference https://github.com/sonatype/nexus-oss/blob/master/components/nexus-core/src/main/java/org/sonatype/nexus/web/internal/SecurityFilter.java#L72 still uses `set`