return user();
Principal p = SecurityAssociation.getPrincipal(); return (p == null) ? "anonymous" : p.getName();