https://www.javacodegeeks.com/2012/07/rest-spring-security-session-problem.html