PasswordDaoAuthenticationProvider no longer stores String against Authentication.setDetails().

core/src/main/java/org/acegisecurity/providers/dao/PasswordDaoAuthenticationProvider.java

@@ -293,7 +293,7 @@ public class PasswordDaoAuthenticationProvider implements AuthenticationProvider
         UsernamePasswordAuthenticationToken result = new UsernamePasswordAuthenticationToken(principal,
                 authentication.getCredentials(), user.getAuthorities());
         result.setDetails((authentication.getDetails() != null)
-            ? authentication.getDetails().toString() : null);
+            ? authentication.getDetails() : null);
 
         return result;
     }