EDIT

	    // close all open editors

	    if(!AbstractUtility.closeAll()){

	        return false;

	    }

	    try{

	        doAuthenticate(username, password);

	    } catch (CdmAuthenticationException e) {

	        MessagingUtils.warningDialog("Could not authenticate", this, e.getMessage());

        }

	    return false;

	}

	public void doAuthenticate(String username, String password) throws CdmAuthenticationException {

	    try {

	        SecurityContextHolder.clearContext();

	        Authentication lastAuthentication = CdmStore.getCurrentAuthentiation();

	        UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(username, password);

	        Authentication authentication = CdmStore.getAuthenticationManager().authenticate(token);

	        User user = (User) authentication.getPrincipal();

	        /* circumventing problem with hibernate not refreshing the transient collection authorities in this case,

	         * see http://dev.e-taxonomy.eu/trac/ticket/4053 */

	        user.initAuthorities();

	        if(logger.isDebugEnabled()){

	            StringBuilder gaText = new StringBuilder();

	            String indent = "    ";

	            Set<GrantedAuthority> gaSet = user.getGrantedAuthorities();

	            _logGrantedAuthotities(gaText, indent, gaSet);

	            for(Group gr : user.getGroups()){

	                gaText.append(indent).append("gr[").append(gr.hashCode()).append("] \"").append(gr.getName()).append("\" ").append(gr.toString()).append("\n");

	                _logGrantedAuthotities(gaText, indent + indent, gr.getGrantedAuthorities());

	            }

	            logger.debug("User authenticated: " + user.getUsername() + "\n" + gaText.toString());

	        }

	        authentication = new UsernamePasswordAuthenticationToken(user,password, authentication.getAuthorities());

	        SecurityContextHolder.getContext().setAuthentication(authentication);

	        CdmApplicationState.setCurrentSecurityContext(SecurityContextHolder.getContext());

	        if(!authentication.equals(lastAuthentication)){

	            this.setChanged();

	            this.notifyObservers();

	        }

	    } catch(BadCredentialsException e){

	        throw new CdmAuthenticationException("Login and/or Password incorrect", e);

	    } catch(LockedException e){

	        throw new CdmAuthenticationException("Account is locked", e);

	    } catch(IllegalArgumentException e){

	        throw new CdmAuthenticationException("Login and/or Password empty", e);

	    }