@Override protected boolean onLoginSuccess(AuthenticationToken token, Subject subject, ServletRequest request, ServletResponse response) throws Exception { regenerateSession(subject); return super.onLoginSuccess(token, subject, request, response); } }