Authentication auth = RequestContextSecurity.getAuthentication();
参考：http://www.mossle.com/docs/springsecurity3/html/technical-overview.html