Fix: Auth failure listener -- apparently it can be a String

security/src/main/java/org/genesys/blocks/security/lockout/AuthenticationFailureBadCredentialsListener.java

@@ -50,7 +50,9 @@ public class AuthenticationFailureBadCredentialsListener implements ApplicationL
 		final Object principal = event.getAuthentication().getPrincipal();
 
 		String userName = null;
-		if (principal instanceof BasicUser<?>) {
+		if (principal instanceof String) {
+			userName = (String) principal;
+		} else if (principal instanceof BasicUser<?>) {
 			userName = ((BasicUser<?>) principal).getUsername();
 		} else if (principal instanceof UserDetails) {
 			userName = ((UserDetails) principal).getUsername();