Session Security

[lafkob]

Investigate spring-security features for sessions. Some ideas:

• implement maximum sessions by implementing WebSecurityConfigurerAdapter?
• double check session timeout handler set up by RequestInterceptor
• other ideas from http://www.baeldung.com/spring-security-session

[StormGull]

Do you have anything left in this issue?