> I just wanted to be sure that there wasn't a less expensive
approach first.
don't get me wrong: i'm not saying that there isn't a less expensive approach... when adding that TODO comment i simply wasn't sure, if the Subject created upon login should be changed in the first place. in the second place i didn't immediately see a straight forward solution to address this. so the comment only documents that i was aware of that - let's call it - limitation. feel free to provide any kind of suggestions or patches. regards angela
