Currently Spring Security's SecurityContextPersistenceFilter has two tasks: * (optionally) eagerly create sessions * Using the SecurityContextRepository to load/save the SecurityContext

We should decouple these two tasks by creating a new ForceEagerSessionCreationFilter. The decoupling is especially important to support deprecation and removal of SecurityContextPersistenceFilter in favor of SecurityContextHolderFilter.