JSF and form-based authentication using Spring Security to display logged-in user