@Before
  public void setUp() throws Exception {
    SecurityContextHolder.getContext().setAuthentication(currentUser);
    StaticWebApplicationContext ctx = new StaticWebApplicationContext();

    BeanDefinitionBuilder webExpressionHandler =
        BeanDefinitionBuilder.rootBeanDefinition(DefaultWebSecurityExpressionHandler.class);
    webExpressionHandler.addPropertyValue("permissionEvaluator", permissionEvaluator);

    ctx.registerBeanDefinition("expressionHandler", webExpressionHandler.getBeanDefinition());
    ctx.registerSingleton("wipe", MockWebInvocationPrivilegeEvaluator.class);
    MockServletContext servletCtx = new MockServletContext();
    servletCtx.setAttribute(WebApplicationContext.ROOT_WEB_APPLICATION_CONTEXT_ATTRIBUTE, ctx);
    authorizeTag = new JspAuthorizeTag();
    authorizeTag.setPageContext(
        new MockPageContext(servletCtx, request, new MockHttpServletResponse()));
  }