TODO app Login Issues on refresh

using the current master branch of TODO, first launch and log in is ok, if you enter something, say a project in, then try to edit that, PUT http://localhost:8080/todo-server/projects/1 400 (Bad Request) is return in the browser console, but jboss console has the hibernate update sql.

refreshing the page at this point will also return a 400

previos commit 5f1cd2078b295be actually works ok