Remember the other day when I said that if you configure an interceptor for an action you have to configure *all* the interceptors for the action? That's actually still true:
I wrote:The actions you defined each set their own interceptor stack consisting *solely* of the login interceptor; this is almost certainly not what you want. If you define an interceptor stack for an action you must define *all* the interceptors that action requires.
You can avoid defining an interceptor stack for each action by defining a default interceptor stack containing all the interceptors you require.
I wasn't making it up, honest.