@Before
 public void createContext() {
   user = mock(Authentication.class);
   root = new MethodSecurityExpressionRoot(user);
   ctx = new StandardEvaluationContext();
   ctx.setRootObject(root);
   trustResolver = mock(AuthenticationTrustResolver.class);
   root.setTrustResolver(trustResolver);
 }