Using secured managed beans with JSF Security