.before(leastRecentlyUsed.getLastAccessAt())) {
leastRecentlyUsed = (SessionInfo) sessions.get(i);
}
}
leastRecentlyUsed.expireNow();
}
private void checkAuthenticationAllowed(Authentication request, HttpSession session)
throws AuthenticationException {
Object principal = request.getPrincipal();