BlasterCred cred = BlasterCred.getBlasterCred(mcf,subject,info);
// Should we throw on null user here?
// Check cred, only the same user as original is allowed
if (cred.name == null)
throw new SecurityException("UserName not allowed to be null");
if (user != null && !user.equals(cred.name) )
throw new SecurityException("Password credentials not the same, reauthentication not allowed");
// If we are here we may set the user if its null
if (user == null)
user = cred.name;