https://www.javacodegeeks.com/2014/10/single-sign-on-with-the-delegated-access-control-pattern.html