<listener>

     <listener-class>org.springframework.security.web.session.HttpSessionEventPublisher</listener-class>

</listener>

<session-management invalid-session-url="/login?invalid_session">

            <concurrency-control max-sessions="1" error-if-maximum-exceeded="false" expired-url="/login?expired"/>

</session-management>

@Override

    public boolean equals(Object o) {

        if (this == o) return true;

        if (!(o instanceof User)) return false;

        User that = (User) o;

        if (guid != null ? !guid.equals(that.guid) : that.guid != null) return false;

        return true;

    }

    @Override

    public int hashCode() {

        return guid != null ? guid.hashCode() : 0;

    }

    @Override

    public boolean equals(Object o) {

        if (this == o) return true;

        if (!(o instanceof StUserDetails)) return false;

        StUserDetails that = (StUserDetails) o;

        if (grantedAuthorities != null ? !grantedAuthorities.equals(that.grantedAuthorities) : that.grantedAuthorities != null)

            return false;

        if (user != null ? !user.equals(that.user) : that.user != null) return false;

        return true;

    }

    @Override

    public int hashCode() {

        int result = user != null ? user.hashCode() : 0;

        result = 31 * result + (grantedAuthorities != null ? grantedAuthorities.hashCode() : 0);

        return result;

    }