Unexpected observations using spring-security (acegi) plugin