 not set, the
        default value of <code>false</code> will be used.</p>
      </td></tr><tr><td><code class="attributeName">cache</code></td><td>
        <p>Should we cache authenticated Principals if the request is part of an
        HTTP session? If not specified, the default value of <code>true</code>
        will be used.</p>
      </td></tr><tr><td><code class="attributeName">changeSessionIdOnAuthentication</code></td><td>
        <p>Controls if the session ID is changed if a session exists at the
