73ea8b5c05
Both overloads of AbstractAuthenticationProcessingFilter.successfulAuthentication() claimed to invoke SessionAuthenticationStrategy, which is not true, as the invokation happens earlier in doFilter(). The Javadoc on these methods are updated to reflect the actual code.