added an interceptor to correctly inject both the saml and individual
username / password combo from a spring security context.