FilterSecurityInterceptor once per request set attr

Only set the attribute if once per request is true

web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java

@@ -117,7 +117,7 @@ public class FilterSecurityInterceptor extends AbstractSecurityInterceptor imple
 		}
 		else {
 			// first time this request being called, so perform security checking
-			if (fi.getRequest() != null) {
+			if (fi.getRequest() != null && observeOncePerRequest) {
 				fi.getRequest().setAttribute(FILTER_APPLIED, Boolean.TRUE);
 			}