This must be a common issue... and I feel that after googling, and SOing I must have just not looked around thoroughly for the answer enough or that no1 has asked it... so p
i had the same problem
i fixed it with getting the authentication from SecurityContextHolder cast it's principal to User then update principal.
everything is working but i don't know this is a good practice or not.